API Reference

Radar

Attacks

Layer3

Top

Copy Markdown

Open in Claude

Open in ChatGPT

Open in Cursor

---

Copy Markdown

View as Markdown

Get top verticals targeted by layer 3 attacks

Deprecated: Use [Radar Attacks Layer 3 Summary By Dimension](https://developers.cloudflare.com/api/resources/radar/subresources/attacks/subresources/layer3/methods/summary_v2/) instead.

client.Radar.Attacks.Layer3.Top.Vertical(ctx, query) (*AttackLayer3TopVerticalResponse, error)

GET/radar/attacks/layer3/top/vertical

This endpoint is deprecated. To continue getting this data, switch to the summary by vertical endpoint.

Security

API Token

The preferred authorization scheme for interacting with the Cloudflare API. Create a token.

Example:Authorization: Bearer Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY

API Email + API Key

The previous authorization scheme for interacting with the Cloudflare API, used in conjunction with a Global API key.

Example:X-Auth-Email: user@example.com

The previous authorization scheme for interacting with the Cloudflare API. When possible, use API tokens instead of Global API keys.

Example:X-Auth-Key: 144c9defac04969c7bfad8efaa8ea194

Accepted Permissions (at least one required)

User Details WriteUser Details Read

ParametersExpand Collapse

query AttackLayer3TopVerticalParams

Continent param.Field[[]string]Optional

Filters results by continent. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude continents from results. For example, -EU,NA excludes results from EU, but includes results from NA.

DateEnd param.Field[[]Time]Optional

End of the date range (inclusive).

DateRange param.Field[[]string]Optional

Filters results by date range. For example, use 7d and 7dcontrol to compare this week with the previous week. Use this parameter or set specific start and end dates (dateStart and dateEnd parameters).

DateStart param.Field[[]Time]Optional

Start of the date range.

Format param.Field[AttackLayer3TopVerticalParamsFormat]Optional

Format in which results will be returned.

const AttackLayer3TopVerticalParamsFormatJson AttackLayer3TopVerticalParamsFormat = "JSON"

const AttackLayer3TopVerticalParamsFormatCsv AttackLayer3TopVerticalParamsFormat = "CSV"

IPVersion param.Field[[]AttackLayer3TopVerticalParamsIPVersion]Optional

Filters results by IP version (Ipv4 vs. IPv6).

const AttackLayer3TopVerticalParamsIPVersionIPv4 AttackLayer3TopVerticalParamsIPVersion = "IPv4"

const AttackLayer3TopVerticalParamsIPVersionIPv6 AttackLayer3TopVerticalParamsIPVersion = "IPv6"

Limit param.Field[int64]Optional

Limits the number of objects returned in the response.

exclusiveMinimum

minimum0

Location param.Field[[]string]Optional

Filters results by location. Specify a comma-separated list of alpha-2 codes. Prefix with - to exclude locations from results. For example, -US,PT excludes results from the US, but includes results from PT.

Name param.Field[[]string]Optional

Array of names used to label the series in the response.

Protocol param.Field[[]AttackLayer3TopVerticalParamsProtocol]Optional

Filters the results by layer 3/4 protocol.

const AttackLayer3TopVerticalParamsProtocolUdp AttackLayer3TopVerticalParamsProtocol = "UDP"

const AttackLayer3TopVerticalParamsProtocolTCP AttackLayer3TopVerticalParamsProtocol = "TCP"

const AttackLayer3TopVerticalParamsProtocolIcmp AttackLayer3TopVerticalParamsProtocol = "ICMP"

const AttackLayer3TopVerticalParamsProtocolGRE AttackLayer3TopVerticalParamsProtocol = "GRE"

ReturnsExpand Collapse

type AttackLayer3TopVerticalResponse struct{…}

Meta AttackLayer3TopVerticalResponseMeta

Metadata for the results.

ConfidenceInfo AttackLayer3TopVerticalResponseMetaConfidenceInfo

Annotations []AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotation

DataSource AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSource

Data source for annotations.

One of the following:

const AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSourceAll AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSource = "ALL"

const AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSourceAIBots AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSource = "AI_BOTS"

const AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSourceAIGateway AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSource = "AI_GATEWAY"

const AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSourceBGP AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSource = "BGP"

const AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSourceBots AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSource = "BOTS"

const AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSourceConnectionAnomaly AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSource = "CONNECTION_ANOMALY"

const AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSourceCT AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSource = "CT"

const AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSourceDNS AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSource = "DNS"

const AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSourceDNSMagnitude AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSource = "DNS_MAGNITUDE"

const AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSourceDNSAS112 AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSource = "DNS_AS112"

const AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSourceDos AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSource = "DOS"

const AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSourceEmailRouting AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSource = "EMAIL_ROUTING"

const AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSourceEmailSecurity AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSource = "EMAIL_SECURITY"

const AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSourceFw AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSource = "FW"

const AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSourceFwPg AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSource = "FW_PG"

const AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSourceHTTP AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSource = "HTTP"

const AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSourceHTTPControl AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSource = "HTTP_CONTROL"

const AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSourceHTTPCrawlerReferer AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSource = "HTTP_CRAWLER_REFERER"

const AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSourceHTTPOrigins AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSource = "HTTP_ORIGINS"

const AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSourceIQI AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSource = "IQI"

const AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSourceLeakedCredentials AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSource = "LEAKED_CREDENTIALS"

const AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSourceNet AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSource = "NET"

const AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSourceRobotsTXT AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSource = "ROBOTS_TXT"

const AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSourceSpeed AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSource = "SPEED"

const AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSourceWorkersAI AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsDataSource = "WORKERS_AI"

Description string

EndDate Time

formatdate-time

EventType AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsEventType

Event type for annotations.

One of the following:

const AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsEventTypeEvent AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsEventType = "EVENT"

const AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsEventTypeGeneral AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsEventType = "GENERAL"

const AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsEventTypeOutage AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsEventType = "OUTAGE"

const AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsEventTypePartialProjection AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsEventType = "PARTIAL_PROJECTION"

const AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsEventTypePipeline AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsEventType = "PIPELINE"

const AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsEventTypeTrafficAnomaly AttackLayer3TopVerticalResponseMetaConfidenceInfoAnnotationsEventType = "TRAFFIC_ANOMALY"

IsInstantaneous bool

Whether event is a single point in time or a time range.

LinkedURL string

formaturi

StartDate Time

formatdate-time

Tags []stringOptional

Level int64

Provides an indication of how much confidence Cloudflare has in the data.

DateRange []AttackLayer3TopVerticalResponseMetaDateRange

EndTime Time

Adjusted end of date range.

formatdate-time

StartTime Time

Adjusted start of date range.

formatdate-time

LastUpdated Time

Timestamp of the last dataset update.

formatdate-time

Normalization AttackLayer3TopVerticalResponseMetaNormalization

Normalization method applied to the results. Refer to Normalization methods.

One of the following:

const AttackLayer3TopVerticalResponseMetaNormalizationPercentage AttackLayer3TopVerticalResponseMetaNormalization = "PERCENTAGE"

const AttackLayer3TopVerticalResponseMetaNormalizationMin0Max AttackLayer3TopVerticalResponseMetaNormalization = "MIN0_MAX"

const AttackLayer3TopVerticalResponseMetaNormalizationMinMax AttackLayer3TopVerticalResponseMetaNormalization = "MIN_MAX"

const AttackLayer3TopVerticalResponseMetaNormalizationRawValues AttackLayer3TopVerticalResponseMetaNormalization = "RAW_VALUES"

const AttackLayer3TopVerticalResponseMetaNormalizationPercentageChange AttackLayer3TopVerticalResponseMetaNormalization = "PERCENTAGE_CHANGE"

const AttackLayer3TopVerticalResponseMetaNormalizationRollingAverage AttackLayer3TopVerticalResponseMetaNormalization = "ROLLING_AVERAGE"

const AttackLayer3TopVerticalResponseMetaNormalizationOverlappedPercentage AttackLayer3TopVerticalResponseMetaNormalization = "OVERLAPPED_PERCENTAGE"

const AttackLayer3TopVerticalResponseMetaNormalizationRatio AttackLayer3TopVerticalResponseMetaNormalization = "RATIO"

Units []AttackLayer3TopVerticalResponseMetaUnit

Measurement units for the results.

Name string

Value string

Top0 []AttackLayer3TopVerticalResponseTop0

Name string

Value string

Get top verticals targeted by layer 3 attacks

Go

HTTP

TypeScript

Python

Go

Terraform

package main

import (
  "context"
  "fmt"

  "github.com/stainless-sdks/cloudflare-go"
  "github.com/stainless-sdks/cloudflare-go/option"
  "github.com/stainless-sdks/cloudflare-go/radar"
)

func main() {
  client := cloudflare.NewClient(
    option.WithAPIToken("Sn3lZJTBX6kkg7OdcBUAxOO963GEIyGQqnFTOFYY"),
  )
  response, err := client.Radar.Attacks.Layer3.Top.Vertical(context.TODO(), radar.AttackLayer3TopVerticalParams{

  })
  if err != nil {
    panic(err.Error())
  }
  fmt.Printf("%+v\n", response.Meta)
}

200 example

{
  "result": {
    "meta": {
      "confidenceInfo": {
        "annotations": [
          {
            "dataSource": "ALL",
            "description": "Cable cut in Tonga",
            "endDate": "2019-12-27T18:11:19.117Z",
            "eventType": "EVENT",
            "isInstantaneous": true,
            "linkedUrl": "https://example.com",
            "startDate": "2019-12-27T18:11:19.117Z",
            "tags": [
              "BOT_CLASS"
            ]
          }
        ],
        "level": 0
      },
      "dateRange": [
        {
          "endTime": "2022-09-17T10:22:57.555Z",
          "startTime": "2022-09-16T10:22:57.555Z"
        }
      ],
      "lastUpdated": "2019-12-27T18:11:19.117Z",
      "normalization": "PERCENTAGE",
      "units": [
        {
          "name": "*",
          "value": "requests"
        }
      ]
    },
    "top_0": [
      {
        "name": "Internet and Telecom",
        "value": "65"
      }
    ]
  },
  "success": true
}

Returns Examples

200 example

{
  "result": {
    "meta": {
      "confidenceInfo": {
        "annotations": [
          {
            "dataSource": "ALL",
            "description": "Cable cut in Tonga",
            "endDate": "2019-12-27T18:11:19.117Z",
            "eventType": "EVENT",
            "isInstantaneous": true,
            "linkedUrl": "https://example.com",
            "startDate": "2019-12-27T18:11:19.117Z",
            "tags": [
              "BOT_CLASS"
            ]
          }
        ],
        "level": 0
      },
      "dateRange": [
        {
          "endTime": "2022-09-17T10:22:57.555Z",
          "startTime": "2022-09-16T10:22:57.555Z"
        }
      ],
      "lastUpdated": "2019-12-27T18:11:19.117Z",
      "normalization": "PERCENTAGE",
      "units": [
        {
          "name": "*",
          "value": "requests"
        }
      ]
    },
    "top_0": [
      {
        "name": "Internet and Telecom",
        "value": "65"
      }
    ]
  },
  "success": true
}