Cloudflare Radar

Submit a URL to scan. Returns the scan UUID which can be used to retrieve results.

Requiredurl

Retrieves AI-related data, including traffic from AI user agents, as well as popular models and model tasks specifically from Cloudflare Workers AI.

Requireddimension

Retrieve annotations including Internet events, outages, and anomalies from various Cloudflare data sources.

Retrieve AS112 DNS sink hole data. AS112 handles reverse DNS lookups for private IP addresses (RFC 1918). Useful for analyzing DNS misconfiguration patterns.

Requireddimension

Get Autonomous System details by ASN

Requiredasn

Get AS-level relationships for an Autonomous System. Shows peer, upstream, and downstream relationships with other ASes.

Requiredasn

Get IRR AS-SETs that an Autonomous System is a member of. AS-SETs are used in routing policies.

Requiredasn

Retrieve BGP hijack events. BGP hijacks occur when an AS announces routes it does not own, potentially redirecting traffic.

Retrieve announced IP address space time series data. Shows the count of announced IPv4 /24s and IPv6 /48s over time. Essential for monitoring BGP route withdrawals, IPv6 address space changes, and detecting significant routing events by ASN or country.

Retrieve BGP route leak events. Route leaks occur when an AS improperly announces routes learned from one peer to another.

Get Multi-Origin AS (MOAS) prefixes. MOAS occurs when a prefix is announced by multiple ASes, which can indicate hijacking or legitimate anycast.

Get prefix-to-ASN mapping. Useful for looking up which AS announces a given IP prefix.

Retrieve BGP routing table statistics including number of routes, origin ASes, and more.

Get real-time BGP routes for a specific IP prefix using public route collectors (RouteViews and RIPE RIS). Shows current routing state including AS paths, RPKI validation status, and visibility across peers. Useful for troubleshooting routing issues and verifying route announcements.

List all ASes in global routing tables with routing statistics (prefix counts, IPv4/IPv6 address count, RPKI validation status). Data comes from public BGP MRT archives.

Retrieve RPKI ASPA changes over time, including additions, removals, and modifications of ASPA objects.

Retrieve a snapshot of current or historical RPKI ASPA (Autonomous System Provider Authorization) objects. ASPA objects define which ASNs are authorized upstream providers for a customer ASN, helping prevent route leaks and hijacks.

Retrieve a timeseries of RPKI ASPA object counts over time.

Retrieve BGP updates time series data. Shows BGP announcement and withdrawal patterns over time.

Get top Autonomous Systems by BGP update count.

Get top ASes ordered by announced prefix count. Useful for understanding which networks have the largest routing footprint. Data comes from public BGP MRT archives and updates every 2 hours.

Get top IP prefixes by BGP update count.

Get detailed information about a specific bot by its slug identifier.

RequiredbotSlug

Retrieve web crawler HTTP request data. Shows crawler traffic patterns by client type, user agent, referrer, and industry. Useful for analyzing crawler behavior and traffic distribution.

Requireddimensionformat

Retrieve bot traffic data including trends by bot name, operator, category, and kind. Covers AI crawlers, search engines, monitoring bots, and more.

Requireddimension

Retrieve Certificate Transparency (CT) log data. CT provides visibility into SSL/TLS certificates issued for domains, useful for security monitoring.

Requireddimension

Get details for a specific Certificate Authority by its SHA256 fingerprint.

RequiredcaSlug

Get details for a specific Certificate Transparency log by its slug.

RequiredlogSlug

Retrieve trends in DNS queries to the 1.1.1.1 resolver.

Requireddimension

Get domain rank details

Requireddomain

Get top or trending domains

Get domain ranking timeseries data. Track how specific domains rank over time.

Retrieve Email Routing trends.

Requireddimension

Retrieve Email Security trends.

Requireddimension

Get details for a specific geolocation by its GeoNames ID.

RequiredgeoId

Retrieve HTTP traffic trends.

Requireddimension

Retrieves a summary or time series of bandwidth, latency, or DNS response time percentiles from the Radar Internet Quality Index (IQI).

Requiredformatmetric

Get top Internet services

Track internet service ranking changes over time. Useful for monitoring how services like ChatGPT, Google, etc. rank over time.

Retrieve summary of bandwidth, latency, jitter, and packet loss, from the previous 90 days of Cloudflare Speed Test.

Requireddimension

Get IP address information including full ASN details (name, country, population estimates from APNIC).

Requiredip

Retrieve network layer (L3/DDoS) attack trends.

Requireddimension

Retrieve application layer (L7) attack trends.

Requireddimension

Retrieve trends in HTTP authentication requests and compromised credential detection. Shows distribution by compromised status and bot class.

Requireddimension

Retrieve NetFlows traffic data showing network traffic patterns. Supports filtering by ADM1 (administrative level 1, e.g., states/provinces) via geoId.

Requireddimension

Get details for a specific cloud provider origin, including all available regions.

Requiredslug

Retrieve cloud provider (AWS, GCP, Azure, OCI) performance metrics. Supports timeseries, summaries grouped by region/success_rate/percentile, and grouped timeseries.

Requireddimensionoriginmetric

Retrieve Internet outages and anomalies. Provides information about detected connectivity issues across ASes and locations.

Get outage counts aggregated by location. Useful for identifying which countries have the most Internet outages.

Retrieve robots.txt analysis data. Shows how websites configure crawler access rules, particularly for AI crawlers. Useful for understanding web crawler policies across domains.

Requireddimension

Get speed test histogram data. Shows distribution of speed test results for bandwidth, latency, or jitter.

Retrieve TCP connection quality metrics including resets and timeouts. Useful for understanding connection reliability across networks and locations.

Requireddimension

Get detailed information about a specific top-level domain (TLD).

Requiredtld

Get traffic anomalies and outages

Get traffic anomalies aggregated by location. Shows which countries have the most detected outage signals, automatically detected by Radar.

Get the results of a URL scan by its UUID. Returns detailed information including verdicts, page info, requests, cookies, and more.

RequiredscanId

Get the HAR (HTTP Archive) data for a completed scan. Contains detailed network request/response information.

RequiredscanId

Get the screenshot URL for a completed scan.

RequiredscanId

List Autonomous Systems

List known bots with their details. Includes AI crawlers, search engines, monitoring bots, and more. Filter by category, operator, kind, or verification status.

List Certificate Authorities (CAs) tracked in Certificate Transparency logs.

List Certificate Transparency logs.

List available geolocations (ADM1 - administrative divisions like states/provinces). Use this to find GeoNames IDs for filtering HTTP and NetFlows data by region.

List cloud provider origins (hyperscalers) available in Cloud Observatory. Returns Amazon (AWS), Google (GCP), Microsoft (Azure), and Oracle (OCI) with their available regions.

List top-level domains (TLDs) including generic, country-code, and sponsored TLDs. Filter by type or manager.

Search URL scans using ElasticSearch-like query syntax. Examples: 'page.domain:example.com', 'verdicts.malicious:true', 'page.asn:AS24940 AND hash:xxx', 'apikey:me AND date:[2025-01 TO 2025-02]'