{"command":{"effect":"read","timeoutSeconds":30,"inputSchema":{"type":"object","description":"Retrieves a ranked list of Autonomous Systems based on their presence in the Cloudflare Botnet Threat Feed. Rankings can be sorted by offense count or number of bad IPs. Optionally compare to a previous date to see rank changes.","properties":{"query":{"type":"object","properties":{"limit":{"description":"Limits the number of objects returned in the response.","type":"integer","default":5,"exclusiveMinimum":0,"examples":[5]},"offset":{"description":"Skips the specified number of objects before fetching the results.","type":"integer","minimum":0,"examples":[0]},"metric":{"description":"Metric to rank ASNs by.","type":"string","default":"NUMBER_OF_OFFENDING_IPS","enum":["OFFENSE_COUNT","NUMBER_OF_OFFENDING_IPS"]},"date":{"description":"The date to retrieve (YYYY-MM-DD format). If not specified, returns the most recent available data. Note: This is the date the report was generated. The report is generated from information collected from the previous day (e.g., the 2026-02-23 entry contains data from 2026-02-22).","type":"string","format":"date","examples":["2026-02-04"]},"compareDateRange":{"description":"Relative date range for rank change comparison (e.g., \"1d\", \"7d\", \"30d\").","type":"string","pattern":"^([1-9][0-9]?|[1-9][0-9]{1,2}|3[0-5][0-9]|36[0-4])d|([1-9]|[1-4][0-9]|5[0-2])w$","examples":["7d"]},"location":{"description":"Filters results by location. Specify an alpha-2 location code.","type":"string","maxLength":2,"minLength":2,"examples":["US"]},"asn":{"description":"Filters results by Autonomous System. Specify one or more Autonomous System Numbers (ASNs) as a comma-separated list. Prefix with `-` to exclude ASNs from results. For example, `-174, 3356` excludes results from AS174, but includes results from AS3356.","type":"array","items":{"type":"string"},"examples":["15169"]},"sortOrder":{"description":"Sort order.","type":"string","enum":["ASC","DESC"],"examples":["desc"]},"format":{"description":"Format in which results will be returned.","type":"string","enum":["JSON","CSV"],"examples":["json"]}},"required":[],"additionalProperties":false}},"required":[],"additionalProperties":false},"name":"Get AS rankings by botnet threat feed activity","id":"cloudflare.radar-get-as-botnet-threat-feed","example":{},"maxRequests":1,"summary":false}}