--- title: Get AS rankings by botnet threat feed activity --- [Skip to content](#_top) [API Reference](https://developers.cloudflare.com/api/typescript) [Radar](https://developers.cloudflare.com/api/typescript/resources/radar) [Entities](https://developers.cloudflare.com/api/typescript/resources/radar/subresources/entities) [ASNs](https://developers.cloudflare.com/api/typescript/resources/radar/subresources/entities/subresources/asns) Copy Markdown Open in **Claude**Open in **ChatGPT**Open in **Cursor** --- **Copy Markdown****View as Markdown** # Get AS rankings by botnet threat feed activity client.radar.entities.asns.botnetThreatFeed(ASNBotnetThreatFeedParams {asn, compareDateRange, date, 6 more } query?, RequestOptionsoptions?): [ASNBotnetThreatFeedResponse]() {ases, meta } GET/radar/entities/asns/botnet\_threat\_feed Retrieves a ranked list of Autonomous Systems based on their presence in the Cloudflare Botnet Threat Feed. Rankings can be sorted by offense count or number of bad IPs. Optionally compare to a previous date to see rank changes. ##### Security
API Token The preferred authorization scheme for interacting with the Cloudflare API. Create a token. **Example:**Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY
API Email + API Key The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key. **Example:**X-Auth-Email: user@example.com The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys. **Example:**X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194
##### Accepted Permissions (at least one required) `User Details Write``User Details Read` ##### ParametersExpand Collapse
query: ASNBotnetThreatFeedParams {asn, compareDateRange, date, 6 more } asn?: Array<string> Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with - to exclude ASNs from results. For example, -174, 3356 excludes results from AS174, but includes results from AS3356. Link to this property compareDateRange?: string Relative date range for rank change comparison (e.g., “1d”, “7d”, “30d”). Link to this property date?: string The date to retrieve (YYYY-MM-DD format). If not specified, returns the most recent available data. Note: This is the date the report was generated. The report is generated from information collected from the previous day (e.g., the 2026-02-23 entry contains data from 2026-02-22). formatdate Link to this property
format?: "JSON"| "CSV" Format in which results will be returned. One of the following: "JSON" Link to this property "CSV" Link to this property
Link to this property limit?: number Limits the number of objects returned in the response. exclusiveMinimum minimum0 Link to this property location?: string Filters results by location. Specify an alpha-2 location code. maxLength2 minLength2 Link to this property
metric?: "OFFENSE\_COUNT"| "NUMBER\_OF\_OFFENDING\_IPS" Metric to rank ASNs by. One of the following: "OFFENSE\_COUNT" Link to this property "NUMBER\_OF\_OFFENDING\_IPS" Link to this property
Link to this property offset?: number Skips the specified number of objects before fetching the results. minimum0 Link to this property
sortOrder?: "ASC"| "DESC" Sort order. One of the following: "ASC" Link to this property "DESC" Link to this property
Link to this property
[Link to this property](<#(resource)%20radar.entities.asns%20%3E%20(method)%20botnet_threat_feed%20%3E%20(params)%20default>) ##### ReturnsExpand Collapse
ASNBotnetThreatFeedResponse {ases, meta }
ases: Array<Ase> asn: number Link to this property country: string Link to this property name: string Link to this property rank: number Link to this property rankChange?: number Link to this property
Link to this property
meta: Meta {date, total, compareDate } date: string Link to this property total: number Link to this property compareDate?: string Link to this property
Link to this property
[Link to this property](<#(resource)%20radar.entities.asns%20%3E%20(model)%20asn_botnet_threat_feed_response%20%3E%20(schema)>) ### Get AS rankings by botnet threat feed activity TypeScript HTTPTypeScriptPythonGoTerraform ``` import Cloudflare from 'cloudflare'; const client = new Cloudflare({ apiToken: process.env['CLOUDFLARE_API_TOKEN'], // This is the default and can be omitted }); const response = await client.radar.entities.asns.botnetThreatFeed(); console.log(response.ases); ``` 200 example ``` { "result": { "ases": [ { "asn": 4134, "country": "CN", "name": "CHINANET-BACKBONE", "rank": 1, "rankChange": -2 } ], "meta": { "date": "2026-02-04T00:00:00Z", "total": 50, "compareDate": "2026-01-28T00:00:00Z" } }, "success": true } ``` ##### Returns Examples 200 example ``` { "result": { "ases": [ { "asn": 4134, "country": "CN", "name": "CHINANET-BACKBONE", "rank": 1, "rankChange": -2 } ], "meta": { "date": "2026-02-04T00:00:00Z", "total": 50, "compareDate": "2026-01-28T00:00:00Z" } }, "success": true } ```