Skip to main content
WorldIP.io

Pulse — AS-path anomaly

Unique-AS-path lengths (prepends collapsed) that deviate sharply from the recent 36-hour median for that prefix.

⇲ Atom All feeds ←
Events last 24h
2,510
Most recent
Showing
200
Refresh
● every 60s

What is AS-path anomaly?

An AS-path anomaly is an unusual or implausible sequence of Autonomous Systems in a route advertisement whose unique-AS-path length (prepends collapsed) deviates sharply from the recent 36-hour median for that prefix — an unexpected transit AS, a loop, or a sudden detour. It can reveal a route leak or a path-prepending mistake.

Geographic distribution

Flagged events

Showing 200 most recent of 2,510 · last 24h
Most recent AS-path anomaly events detected across RIPE RIS collectors in the last 24 hours
When Severity Prefix AS
Aug 30, 01:57 UTC 58 177.67.72.0/24 AS262530
Aug 30, 01:57 UTC 56 50.175.187.0/24 AS395976
Aug 30, 01:57 UTC 56 172.70.43.0/24 AS13335
Aug 30, 01:57 UTC 56 177.72.36.0/23 AS262540
Aug 30, 01:57 UTC 56 177.44.216.0/24 AS263566
Aug 30, 01:57 UTC 56 198.176.250.0/24 AS6122
Aug 30, 01:57 UTC 56 203.188.228.0/23 AS38794
Aug 30, 01:57 UTC 56 45.232.244.0/23 AS263980
Aug 30, 01:57 UTC 56 38.51.227.0/24 AS174
Aug 30, 01:57 UTC 58 167.249.82.0/23 AS265169
Aug 30, 01:57 UTC 56 179.107.150.0/24 AS28171
Aug 30, 01:57 UTC 56 154.61.167.0/24 AS174
Aug 30, 01:57 UTC 56 160.30.184.0/24 AS138558
Aug 30, 01:57 UTC 56 177.36.160.0/23 AS28669
Aug 30, 01:57 UTC 56 191.241.76.0/24 AS53181
Aug 30, 01:57 UTC 58 191.37.170.0/23 AS271023
Aug 30, 01:57 UTC 58 164.163.29.0/24 AS265937
Aug 30, 01:57 UTC 58 177.85.190.0/24 AS269416
Aug 30, 01:57 UTC 58 45.174.165.0/24 AS262530
Aug 30, 01:57 UTC 56 69.91.128.0/22 AS20303
Aug 30, 01:57 UTC 56 149.7.222.0/24 AS174
Aug 30, 01:57 UTC 58 45.176.1.0/24 AS268924
Aug 30, 01:57 UTC 58 45.179.230.0/24 AS269118
Aug 30, 01:57 UTC 56 154.49.70.0/24 AS174
Aug 30, 01:57 UTC 56 45.164.203.0/24 AS272174
Aug 30, 01:57 UTC 56 138.97.118.0/23 AS264162
Aug 30, 01:57 UTC 56 98.187.92.0/24 AS22773
Aug 30, 01:57 UTC 56 177.128.146.0/23 AS270814
Aug 30, 01:57 UTC 56 174.115.192.0/18 AS812
Aug 30, 01:57 UTC 56 154.49.194.0/24 AS174
Aug 30, 01:57 UTC 56 97.109.240.0/20 AS812
Aug 30, 01:57 UTC 56 179.127.156.0/24 AS263641
Aug 30, 01:57 UTC 56 99.249.0.0/18 AS812
Aug 30, 01:57 UTC 56 179.107.172.0/24 AS28300
Aug 30, 01:57 UTC 56 193.28.0.0/24 AS30730
Aug 30, 01:57 UTC 56 2.27.171.0/24 AS402425
Aug 30, 01:57 UTC 56 196.28.42.0/23 AS20011
Aug 30, 01:57 UTC 56 191.241.75.0/24 AS53181
Aug 30, 01:57 UTC 56 186.224.60.0/23 AS262691
Aug 30, 01:57 UTC 56 162.142.18.0/23 AS397686
Aug 30, 01:57 UTC 56 14.238.11.0/24 AS45899
Aug 30, 01:57 UTC 58 143.0.167.0/24 AS264014
Aug 30, 01:57 UTC 58 45.174.166.0/24 AS262530
Aug 30, 01:57 UTC 56 177.223.106.0/23 AS270814
Aug 30, 01:57 UTC 56 97.109.176.0/21 AS812
Aug 30, 01:57 UTC 56 45.163.71.0/24 AS268559
Aug 30, 01:57 UTC 56 154.49.219.0/24 AS174
Aug 30, 01:57 UTC 56 177.20.168.0/21 AS270814
Aug 30, 01:57 UTC 56 131.161.92.0/23 AS264397
Aug 30, 01:57 UTC 58 177.67.78.0/24 AS262530
Aug 30, 01:57 UTC 56 177.223.96.0/22 AS270814
Aug 30, 01:57 UTC 56 99.251.192.0/19 AS812
Aug 30, 01:57 UTC 56 97.109.1.0/24 AS812
Aug 30, 01:57 UTC 56 143.137.34.0/24 AS264025
Aug 30, 01:57 UTC 56 156.247.160.0/19 AS61461
Aug 30, 01:57 UTC 56 149.6.194.0/23 AS174
Aug 30, 01:57 UTC 56 99.226.192.0/18 AS812
Aug 30, 01:57 UTC 56 173.32.160.0/23 AS812
Aug 30, 01:57 UTC 58 170.84.84.0/23 AS264996
Aug 30, 01:57 UTC 58 152.173.128.0/17 AS7418
Aug 30, 01:57 UTC 56 191.241.68.0/24 AS53181
Aug 30, 01:57 UTC 56 177.20.168.0/23 AS270814
Aug 30, 01:57 UTC 58 199.19.146.0/24 AS10558
Aug 30, 01:57 UTC 56 45.235.182.0/24 AS268192
Aug 30, 01:57 UTC 56 99.232.224.0/19 AS812
Aug 30, 01:57 UTC 56 45.187.166.0/23 AS266435
Aug 30, 01:57 UTC 56 149.13.124.0/23 AS174
Aug 30, 01:57 UTC 56 147.73.0.0/16 AS5050
Aug 30, 01:57 UTC 56 72.136.178.0/24 AS812
Aug 30, 01:57 UTC 56 179.108.218.0/23 AS262691
Aug 30, 01:57 UTC 56 154.48.209.0/24 AS174
Aug 30, 01:57 UTC 56 104.22.103.0/24 AS13335
Aug 30, 01:57 UTC 58 193.254.230.0/23 AS25304
Aug 30, 01:57 UTC 56 99.251.0.0/17 AS812
Aug 30, 01:57 UTC 56 99.225.160.0/19 AS812
Aug 30, 01:57 UTC 56 177.223.104.0/22 AS270814
Aug 30, 01:57 UTC 58 45.230.235.0/24 AS61748
Aug 30, 01:57 UTC 58 195.26.220.0/22 AS8245
Aug 30, 01:57 UTC 56 99.226.0.0/18 AS812
Aug 30, 01:57 UTC 58 128.140.200.0/21 AS57365
Aug 30, 01:57 UTC 56 38.10.98.0/23 AS267521
Aug 30, 01:57 UTC 56 99.242.0.0/16 AS812
Aug 30, 01:57 UTC 56 179.107.136.0/24 AS28171
Aug 30, 01:57 UTC 56 99.217.64.0/20 AS812
Aug 30, 01:57 UTC 56 170.239.96.0/23 AS264397
Aug 30, 01:57 UTC 56 45.169.240.0/24 AS268134
Aug 30, 01:57 UTC 56 72.139.252.0/22 AS812
Aug 30, 01:57 UTC 58 170.245.99.0/24 AS61748
Aug 30, 01:57 UTC 56 177.38.187.0/24 AS52758
Aug 30, 01:57 UTC 56 154.49.193.0/24 AS174
Aug 30, 01:57 UTC 56 38.255.18.0/23 AS174
Aug 30, 01:57 UTC 56 212.60.95.0/24 AS25250
Aug 30, 01:57 UTC 56 45.239.72.0/24 AS268355
Aug 30, 01:57 UTC 58 38.226.184.0/22 AS271023
Aug 30, 01:57 UTC 58 45.185.0.0/24 AS269351
Aug 30, 01:57 UTC 56 213.202.64.0/18 AS13046
Aug 30, 01:57 UTC 58 179.127.147.0/24 AS262530
Aug 30, 01:57 UTC 56 194.126.152.0/24 AS199775
Aug 30, 01:57 UTC 56 35.33.0.0/18 AS237
Aug 30, 01:57 UTC 56 3.168.174.0/24 AS16509
Aug 30, 01:57 UTC 58 149.13.30.0/24 AS174
Aug 30, 01:57 UTC 56 173.35.232.0/23 AS812
Aug 30, 01:57 UTC 56 38.159.118.0/24 AS174
Aug 30, 01:57 UTC 56 99.244.160.0/20 AS812
Aug 30, 01:57 UTC 56 177.234.248.0/24 AS52468
Aug 30, 01:57 UTC 56 191.241.71.0/24 AS53181
Aug 30, 01:57 UTC 56 185.32.76.0/24 AS62749
Aug 30, 01:57 UTC 56 177.53.6.0/23 AS270814
Aug 30, 01:57 UTC 56 179.107.178.0/24 AS28300
Aug 30, 01:57 UTC 58 45.238.42.0/24 AS268311
Aug 30, 01:57 UTC 56 45.70.52.0/23 AS264162
Aug 30, 01:57 UTC 58 177.91.166.0/24 AS263445
Aug 30, 01:57 UTC 56 104.161.253.0/24 AS394808
Aug 30, 01:57 UTC 56 177.128.152.0/21 AS270814
Aug 30, 01:57 UTC 56 45.226.43.0/24 AS266986
Aug 30, 01:57 UTC 56 154.59.145.0/24 AS174
Aug 30, 01:57 UTC 58 45.6.233.0/24 AS61649
Aug 30, 01:57 UTC 56 181.15.97.0/24 AS52444
Aug 30, 01:57 UTC 56 68.68.97.0/24 AS18779
Aug 30, 01:57 UTC 56 113.164.239.0/24 AS45899
Aug 30, 01:57 UTC 56 185.208.240.0/22 AS199775
Aug 30, 01:57 UTC 56 185.167.241.0/24 AS24953
Aug 30, 01:57 UTC 56 131.108.202.0/23 AS262691
Aug 30, 01:57 UTC 56 177.39.8.0/23 AS269096
Aug 30, 01:57 UTC 56 130.117.54.0/24 AS174
Aug 30, 01:57 UTC 56 201.148.53.0/24 AS18734
Aug 30, 01:57 UTC 58 179.63.135.0/24 AS271560
Aug 30, 01:57 UTC 56 173.35.98.0/23 AS812
Aug 30, 01:57 UTC 56 154.41.77.0/24 AS329082
Aug 30, 01:57 UTC 56 97.109.9.0/24 AS812
Aug 30, 01:57 UTC 60 170.231.208.0/23 AS61621
Aug 30, 01:57 UTC 56 103.166.42.0/23 AS134715
Aug 30, 01:57 UTC 58 41.204.6.0/24 AS32398
Aug 30, 01:57 UTC 56 184.23.0.0/18 AS46375
Aug 30, 01:57 UTC 56 173.33.4.0/23 AS812
Aug 30, 01:57 UTC 58 45.237.64.0/22 AS274276
Aug 30, 01:57 UTC 58 177.67.73.0/24 AS262530
Aug 30, 01:57 UTC 56 154.61.86.0/24 AS174
Aug 30, 01:57 UTC 56 196.28.7.0/24 AS32398
Aug 30, 01:57 UTC 58 138.186.51.0/24 AS263858
Aug 30, 01:57 UTC 58 168.196.148.0/24 AS262530
Aug 30, 01:57 UTC 56 77.67.17.0/24 AS21859
Aug 30, 01:57 UTC 56 45.235.198.0/23 AS268199
Aug 30, 01:57 UTC 58 45.238.43.0/24 AS268311
Aug 30, 01:57 UTC 56 154.50.201.0/24 AS174
Aug 30, 01:57 UTC 56 154.45.236.0/24 AS174
Aug 30, 01:57 UTC 56 130.117.57.0/24 AS174
Aug 30, 01:57 UTC 56 173.33.104.0/23 AS812
Aug 30, 01:57 UTC 56 179.127.158.0/24 AS263641
Aug 30, 01:57 UTC 56 45.187.166.0/24 AS266435
Aug 30, 01:57 UTC 56 45.172.205.0/24 AS268787
Aug 30, 01:57 UTC 56 45.226.42.0/24 AS266986
Aug 30, 01:57 UTC 56 45.164.115.0/24 AS53181
Aug 30, 01:57 UTC 56 187.121.168.0/21 AS270814
Aug 30, 01:57 UTC 56 173.34.118.0/23 AS812
Aug 30, 01:57 UTC 56 196.216.164.0/23 AS37513
Aug 30, 01:57 UTC 56 154.51.152.0/23 AS174
Aug 30, 01:57 UTC 56 45.161.220.0/23 AS268499
Aug 30, 01:57 UTC 56 177.128.148.0/23 AS270814
Aug 30, 01:57 UTC 56 45.173.225.0/24 AS268835
Aug 30, 01:57 UTC 58 186.249.31.0/24 AS262463
Aug 30, 01:57 UTC 56 154.61.90.0/23 AS174
Aug 30, 01:57 UTC 58 131.100.190.0/24 AS61649
Aug 30, 01:57 UTC 58 177.67.75.0/24 AS262530
Aug 30, 01:57 UTC 56 3.168.173.0/24 AS16509
Aug 30, 01:57 UTC 56 199.201.203.0/24 AS6122
Aug 30, 01:57 UTC 56 108.159.209.0/24 AS16509
Aug 30, 01:57 UTC 56 154.59.128.0/24 AS174
Aug 30, 01:57 UTC 56 38.131.220.0/24 AS174
Aug 30, 01:57 UTC 56 45.6.137.0/24 AS266136
Aug 30, 01:57 UTC 56 217.27.240.0/20 AS29006
Aug 30, 01:57 UTC 56 207.165.0.0/16 AS6122
Aug 30, 01:57 UTC 56 200.160.56.0/22 AS8055
Aug 30, 01:57 UTC 56 177.53.12.0/22 AS270814
Aug 30, 01:57 UTC 56 130.117.53.0/24 AS174
Aug 30, 01:57 UTC 56 177.185.148.0/22 AS270814
Aug 30, 01:57 UTC 56 45.57.17.0/24 AS2906
Aug 30, 01:57 UTC 56 196.209.73.0/24 AS20011
Aug 30, 01:57 UTC 56 217.168.16.0/20 AS29006
Aug 30, 01:57 UTC 56 191.241.65.0/24 AS53181
Aug 30, 01:57 UTC 56 199.192.134.0/24 AS53975
Aug 30, 01:57 UTC 58 45.164.144.0/24 AS268631
Aug 30, 01:57 UTC 58 45.226.5.0/24 AS266953
Aug 30, 01:57 UTC 56 154.58.20.0/22 AS174
Aug 30, 01:57 UTC 56 184.188.66.0/24 AS22773
Aug 30, 01:57 UTC 56 99.255.176.0/20 AS812
Aug 30, 01:57 UTC 56 97.109.104.0/22 AS812
Aug 30, 01:57 UTC 56 143.255.0.0/23 AS265140
Aug 30, 01:57 UTC 56 45.226.107.0/24 AS267013
Aug 30, 01:57 UTC 56 138.97.116.0/23 AS264162
Aug 30, 01:57 UTC 58 170.245.120.0/23 AS263980
Aug 30, 01:57 UTC 56 189.28.173.0/24 AS28300
Aug 30, 01:57 UTC 56 80.245.33.0/24 AS174
Aug 30, 01:57 UTC 56 201.148.93.0/24 AS18734
Aug 30, 01:57 UTC 56 184.181.87.0/24 AS22773
Aug 30, 01:57 UTC 56 68.232.146.0/23 AS16417
Aug 30, 01:57 UTC 56 168.121.250.0/24 AS262966
Aug 30, 01:57 UTC 56 151.96.0.0/16 AS8217
Aug 30, 01:57 UTC 56 130.117.83.0/24 AS174
Aug 30, 01:57 UTC 56 184.188.72.0/24 AS22773

Frequently Asked Questions

What is a BGP AS-path anomaly?

An AS-path anomaly is an unusual or implausible sequence of Autonomous Systems in a route advertisement whose unique-AS-path length (prepends collapsed) deviates sharply from the recent 36-hour median for that prefix — an unexpected transit AS, a loop, or a sudden detour. It can reveal a route leak or a path-prepending mistake.

Where does this data come from?

Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.

How often is the AS-path anomaly feed updated?

The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-08-30 02:50 UTC.

How do I subscribe to AS-path anomaly events?

Subscribe to the Atom feed at /pulse/bgp/aspath.atom or poll the JSON endpoint at /api/pulse/bgp/aspath.

Share