diff --git a/src/content/changelog/radar/2025-03-18-radar-leaked-credentials-insights.mdx b/src/content/changelog/radar/2025-03-18-radar-leaked-credentials-insights.mdx new file mode 100644 index 00000000000000..6a049555afbee8 --- /dev/null +++ b/src/content/changelog/radar/2025-03-18-radar-leaked-credentials-insights.mdx @@ -0,0 +1,23 @@ +--- +title: Leaked Credentials Insights in Cloudflare Radar +description: Expanded security insights with new API endpoints for aggregated authentication request data +products: + - radar +date: 2025-03-18T14:00:00Z +--- + +[**Radar**](/radar/) has expanded its security insights, providing visibility into aggregate trends in authentication requests, +including the detection of leaked credentials through [leaked credentials detection](/waf/detections/leaked-credentials/) scans. + +We have now introduced the following endpoints: + +- [`summary`](/api/resources/radar/subresources/leaked_credentials/subresources/summary/): Retrieves summaries of HTTP authentication requests distribution across two different dimensions. +- [`timeseries_group`](/api/resources/radar/subresources/leaked_credentials/subresources/timeseries_groups/): Retrieves timeseries data for HTTP authentication requests distribution across two different dimensions. + +The following dimensions are available, displaying the distribution of HTTP authentication requests based on: + +- `compromised`: Credential status (clean vs. compromised). +- `bot_class`: [Bot class](/radar/concepts/bot-classes) (human vs. bot). + + +Dive deeper into leaked credential detection in this [blog post](https://blog.cloudflare.com/password-reuse-rampant-half-user-logins-compromised/) and learn more about the expanded Radar security insights in our [blog post](https://blog.cloudflare.com/cloudflare-radar-ddos-leaked-credentials-bots). diff --git a/src/content/docs/radar/glossary.mdx b/src/content/docs/radar/glossary.mdx index 57b143cdebea47..9da9e6788bd8f1 100644 --- a/src/content/docs/radar/glossary.mdx +++ b/src/content/docs/radar/glossary.mdx @@ -145,6 +145,10 @@ The Internet Quality Index estimates connection performance under average utiliz The IQI methodology requires a minimum number of measurements to generate estimates. As a result, graphs for smaller countries and ASNs may display occasional gaps, especially during nighttime. These gaps do not indicate outages. The number of measurements underlying IQI does not necessarily correlate with the volume of traffic observed by Cloudflare in a specific country or ASN. +## Leaked credentials + +[Leaked credentials detection](/waf/detections/leaked-credentials/) scans incoming HTTP requests for known authentication patterns from common web apps and any custom detection locations that were configured. Cloudflare Radar provides visibility into aggregate trends in authentication requests, including the detection of leaked credentials. + ## Mobile operating systems The Mobile Operating Systems graph shows the distribution of mobile device requests by operating system, representing trends observed in Internet traffic originating globally or within a given location or autonomous system within the selected time range, based on aggregated data from our network. "Mobile device" includes phones and tablets only, and does not include other types of devices, such as those classified as desktops/laptops, smart TVs, or gaming consoles. diff --git a/src/content/docs/radar/index.mdx b/src/content/docs/radar/index.mdx index e4a0706907dc03..43aa79c2c54d8f 100644 --- a/src/content/docs/radar/index.mdx +++ b/src/content/docs/radar/index.mdx @@ -8,31 +8,115 @@ head: content: Overview --- -import { Description, Feature, Plan } from "~/components" +import { + CardGrid, + Description, + Feature, + LinkButton, + LinkTitleCard, + Plan, +} from "~/components"; - Get access to Cloudflare's data on global Internet traffic. - - -[Cloudflare Radar](https://radar.cloudflare.com) is a hub that showcases global Internet traffic, attacks, and technology trends and insights. It is powered by data from Cloudflare’s global network, as well as aggregated and [anonymized](/1.1.1.1/privacy/public-dns-resolver/) data from Cloudflare’s [1.1.1.1 public DNS resolver](/1.1.1.1/). + -Using Radar's API you can access Cloudflare's data on global Internet traffic. +[Cloudflare Radar](https://radar.cloudflare.com) is a hub that showcases global Internet traffic, attacks, and technology trends and insights. It is powered by data from [Cloudflare’s global network](https://www.cloudflare.com/network/), as well as aggregated and [anonymized data](/1.1.1.1/privacy/public-dns-resolver/) from Cloudflare’s [1.1.1.1 public DNS resolver](/1.1.1.1/). -Radar's API is free, allowing academics, data sleuths and other web enthusiasts to investigate Internet usage across the globe. +Using [Radar's API](/api/resources/radar/) you can access Cloudflare's data on global Internet traffic. +Radar's API is free, allowing academics, technology professionals, and other web enthusiasts to investigate Internet usage across the globe. Data available via Radar API endpoints is made available under the [CC BY-NC 4.0](https://creativecommons.org/licenses/by-nc/4.0/) license. -*** + + Get started + + + + Radar website + + +--- ## Features - -Start learning how to use Radar's API by making your first request. + + Start learning how to use Radar's API by making your first request. - -What to know before making comparisons between locations, [autonomous systems](https://www.cloudflare.com/en-gb/learning/network-layer/what-is-an-autonomous-system/) and more. + + What to know before making comparisons between locations, [autonomous + systems](https://www.cloudflare.com/en-gb/learning/network-layer/what-is-an-autonomous-system/), and more. + + + Understand the security, performance, technology, and network details of a URL with a publicly shareable report. + + +--- + +## More resources + + + + + Explore the diverse data available in Cloudflare Radar, including NetFlows, HTTP requests, DNS queries, and much more. + + + + Follow @CloudflareRadar on X to learn about Internet trends, as seen by the Cloudflare global network. + + + + Follow @cloudflareradar on Mastodon to learn about Internet trends, as seen by the Cloudflare global network. + + + + Follow @radar.cloudflare.com on Bluesky to learn about Internet trends, as seen by the Cloudflare global network. + + + + Read articles about the latest trends and updates on Cloudflare Radar. + + + diff --git a/src/content/docs/radar/investigate/url-scanner.mdx b/src/content/docs/radar/investigate/url-scanner.mdx index 0b4fdd3bd5cd58..66b7a3634312c8 100644 --- a/src/content/docs/radar/investigate/url-scanner.mdx +++ b/src/content/docs/radar/investigate/url-scanner.mdx @@ -6,7 +6,7 @@ sidebar: --- -To better understand Internet usage around the world, use Cloudflare's URL Scanner. With Cloudflare's URL Scanner, you have the ability to investigate the details of a domain, IP, URL, or ASN. Cloudflare's URL Scanner is available in the Security Center of the Cloudflare dashboard, [Cloudflare Radar](https://radar.cloudflare.com/scan) and the Cloudflare [API](/api/resources/url_scanner/subresources/scans/). +To better understand Internet usage around the world, use Cloudflare's URL Scanner. With Cloudflare's URL Scanner, you have the ability to investigate the details of a domain, IP, URL, or ASN. Cloudflare's URL Scanner is available in the Security Center of the Cloudflare dashboard, [Cloudflare Radar](https://radar.cloudflare.com/scan), and the Cloudflare [API](/api/resources/url_scanner/). ## Use the API diff --git a/src/content/release-notes/radar.yaml b/src/content/release-notes/radar.yaml index ff11d0412b4a61..f2d8ef1f97fdcc 100644 --- a/src/content/release-notes/radar.yaml +++ b/src/content/release-notes/radar.yaml @@ -5,6 +5,10 @@ productLink: "/radar/" productArea: Developer platform productAreaLink: /workers/platform/changelog/platform/ entries: + - publish_date: "2025-03-18" + title: Add leaked credential checks endpoints + description: |- + * Added [leaked credential checks endpoints](/api/resources/radar/subresources/leaked_credentials/). - publish_date: "2025-02-27" title: Add DNS endpoints description: |-