GET /radar/entities/asns/botnet_threat_feed

Retrieves a ranked list of Autonomous Systems based on their presence in the Cloudflare Botnet Threat Feed. Rankings can be sorted by offense count or number of bad IPs. Optionally compare to a previous date to see rank changes.

Servers

https://api.cloudflare.com/client/v4

Query parameters

Name	Type	Required	Description
`metric`	String	No	Metric to rank ASNs by. Valid values: `"NUMBER_OF_OFFENDING_IPS"` `"OFFENSE_COUNT"` Default value: "NUMBER_OF_OFFENDING_IPS"
`asn[]`	Array	No	Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with `-` to exclude ASNs from results. For example, `-174, 3356` excludes results from AS174, but includes results from AS3356.
`sortOrder`	String	No	Sort order. Valid values: `"DESC"` `"ASC"`
`limit`	Integer	No	Limits the number of objects returned in the response. Default value: 5
`format`	String	No	Format in which results will be returned. Valid values: `"CSV"` `"JSON"`
`compareDateRange`	String	No	Relative date range for rank change comparison (e.g., "1d", "7d", "30d").
`location`	String	No	Filters results by location. Specify an alpha-2 location code.
`date`	String	No	The date to retrieve (YYYY-MM-DD format). If not specified, returns the most recent available data. Note: This is the date the report was generated. The report is generated from information collected from the previous day (e.g., the 2026-02-23 entry contains data from 2026-02-22).
`offset`	Integer	No	Skips the specified number of objects before fetching the results.

How to start integrating

Add HTTP Task to your workflow definition.
Search for the API you want to integrate with and click on the name.
- This loads the API reference documentation and prepares the Http request settings.
Click Test request to test run your request to the API and see the API's response.