Skip to main content
WorldIP.io

Pulse — AS-path anomaly

Unique-AS-path lengths (prepends collapsed) that deviate sharply from the recent 36-hour median for that prefix.

⇲ Atom All feeds ←
Events last 24h
2,621
Most recent
Showing
200
Refresh
● every 60s

What is AS-path anomaly?

An AS-path anomaly is an unusual or implausible sequence of Autonomous Systems in a route advertisement whose unique-AS-path length (prepends collapsed) deviates sharply from the recent 36-hour median for that prefix — an unexpected transit AS, a loop, or a sudden detour. It can reveal a route leak or a path-prepending mistake.

Geographic distribution

Flagged events

Showing 200 most recent of 2,621 · last 24h
Most recent AS-path anomaly events detected across RIPE RIS collectors in the last 24 hours
When Severity Prefix AS
Aug 30, 10:56 UTC 56 45.164.134.0/23 AS268617
Aug 30, 10:56 UTC 58 132.255.180.0/23 AS263040
Aug 30, 10:56 UTC 56 177.128.192.0/21 AS52872
Aug 30, 10:56 UTC 56 5.252.15.0/24 AS5404
Aug 30, 10:56 UTC 56 186.235.226.0/23 AS53205
Aug 30, 10:56 UTC 56 5.252.13.0/24 AS5404
Aug 30, 10:56 UTC 58 132.255.182.0/23 AS263040
Aug 30, 10:56 UTC 56 150.40.99.0/24 AS215760
Aug 30, 10:56 UTC 56 189.84.104.0/23 AS270904
Aug 30, 10:56 UTC 56 41.177.0.0/16 AS36874
Aug 30, 10:56 UTC 56 149.3.164.0/22 AS5404
Aug 30, 10:56 UTC 56 217.74.10.0/24 AS47692
Aug 30, 10:56 UTC 56 41.223.218.0/23 AS36958
Aug 30, 10:56 UTC 56 5.252.14.0/24 AS5404
Aug 30, 10:56 UTC 56 5.252.12.0/24 AS5404
Aug 30, 10:56 UTC 56 5.252.12.0/22 AS5404
Aug 30, 10:56 UTC 56 149.3.166.0/24 AS5404
Aug 30, 10:56 UTC 56 196.13.161.0/24 AS327784
Aug 30, 10:56 UTC 58 177.129.146.0/23 AS263040
Aug 30, 10:56 UTC 56 41.86.57.0/24 AS36958
Aug 30, 10:56 UTC 56 185.206.232.0/22 AS51758
Aug 30, 10:56 UTC 56 203.177.75.0/24 AS154735
Aug 30, 10:56 UTC 56 95.215.184.0/21 AS51758
Aug 30, 10:56 UTC 56 196.1.117.0/24 AS327977
Aug 30, 10:56 UTC 56 149.3.167.0/24 AS5404
Aug 30, 10:56 UTC 56 77.83.110.0/24 AS5404
Aug 30, 10:56 UTC 56 77.83.109.0/24 AS5404
Aug 30, 10:56 UTC 56 77.83.108.0/22 AS5404
Aug 30, 10:56 UTC 56 44.31.213.0/24 AS202928
Aug 30, 10:56 UTC 56 217.19.44.0/24 AS8245
Aug 30, 10:56 UTC 56 41.223.219.0/24 AS36958
Aug 30, 10:56 UTC 56 77.83.111.0/24 AS5404
Aug 30, 10:56 UTC 56 41.223.218.0/24 AS36958
Aug 30, 10:56 UTC 56 41.223.216.0/22 AS36958
Aug 30, 10:56 UTC 56 142.249.115.0/24 AS204921
Aug 30, 10:56 UTC 56 193.142.206.0/23 AS204805
Aug 30, 09:57 UTC 56 104.23.215.0/24 AS13335
Aug 30, 09:57 UTC 56 104.22.48.0/24 AS13335
Aug 30, 09:57 UTC 56 104.22.134.0/24 AS13335
Aug 30, 09:57 UTC 56 179.48.144.0/24 AS271090
Aug 30, 09:57 UTC 56 179.48.146.0/23 AS271090
Aug 30, 09:57 UTC 56 104.23.216.0/24 AS13335
Aug 30, 09:57 UTC 58 177.124.36.0/22 AS52861
Aug 30, 09:57 UTC 56 201.71.26.0/24 AS270290
Aug 30, 09:57 UTC 56 104.22.132.0/24 AS13335
Aug 30, 09:57 UTC 58 177.124.32.0/21 AS52861
Aug 30, 09:57 UTC 56 200.142.234.0/24 AS270687
Aug 30, 09:57 UTC 56 104.22.133.0/24 AS13335
Aug 30, 09:57 UTC 56 104.23.231.0/24 AS13335
Aug 30, 09:57 UTC 56 179.48.145.0/24 AS271090
Aug 30, 09:57 UTC 58 192.124.119.0/24 AS29802
Aug 30, 09:57 UTC 56 152.172.0.0/17 AS7418
Aug 30, 09:57 UTC 56 152.174.128.0/17 AS7418
Aug 30, 09:57 UTC 56 143.137.212.0/22 AS264053
Aug 30, 09:57 UTC 58 177.124.38.0/23 AS52861
Aug 30, 09:57 UTC 56 203.114.67.0/24 AS7611
Aug 30, 09:57 UTC 56 5.172.190.0/23 AS207012
Aug 30, 09:57 UTC 56 45.171.228.0/23 AS268746
Aug 30, 09:57 UTC 56 152.174.0.0/17 AS7418
Aug 30, 09:57 UTC 56 45.171.228.0/24 AS268746
Aug 30, 09:57 UTC 58 190.11.210.0/24 AS270652
Aug 30, 09:57 UTC 58 177.93.144.0/23 AS52861
Aug 30, 09:57 UTC 58 177.124.32.0/22 AS52861
Aug 30, 09:57 UTC 58 177.93.148.0/22 AS52861
Aug 30, 09:57 UTC 56 45.171.229.0/24 AS268746
Aug 30, 09:57 UTC 58 177.93.144.0/21 AS52861
Aug 30, 09:57 UTC 56 152.173.0.0/17 AS7418
Aug 30, 09:57 UTC 58 177.124.36.0/23 AS52861
Aug 30, 09:57 UTC 58 190.11.211.0/24 AS270652
Aug 30, 09:57 UTC 58 177.124.32.0/23 AS52861
Aug 30, 09:57 UTC 58 177.93.148.0/23 AS52861
Aug 30, 09:57 UTC 56 152.172.128.0/17 AS7418
Aug 30, 09:57 UTC 56 177.128.96.0/23 AS262769
Aug 30, 09:57 UTC 58 177.93.146.0/23 AS52861
Aug 30, 09:57 UTC 58 190.11.210.0/23 AS270652
Aug 30, 09:57 UTC 56 152.173.128.0/17 AS7418
Aug 30, 09:57 UTC 58 177.124.34.0/23 AS52861
Aug 30, 09:57 UTC 58 177.93.144.0/22 AS52861
Aug 30, 09:57 UTC 56 104.22.60.0/24 AS13335
Aug 30, 08:57 UTC 58 136.210.0.0/16 AS1555
Aug 30, 08:57 UTC 56 196.12.10.0/24 AS37513
Aug 30, 08:57 UTC 58 168.181.158.0/23 AS262769
Aug 30, 08:57 UTC 56 185.117.188.0/24 AS49737
Aug 30, 08:57 UTC 58 170.79.172.0/24 AS266303
Aug 30, 08:57 UTC 56 138.59.92.0/23 AS262769
Aug 30, 08:57 UTC 58 45.237.181.0/24 AS268283
Aug 30, 08:57 UTC 58 200.81.146.0/23 AS270934
Aug 30, 08:57 UTC 56 186.235.185.0/24 AS61888
Aug 30, 08:57 UTC 60 186.194.81.0/24 AS28249
Aug 30, 08:57 UTC 58 200.71.85.0/24 AS271076
Aug 30, 08:57 UTC 56 45.231.102.0/23 AS267236
Aug 30, 08:57 UTC 56 45.180.84.0/22 AS269139
Aug 30, 08:57 UTC 58 177.128.98.0/23 AS262769
Aug 30, 08:57 UTC 58 167.249.124.0/22 AS265247
Aug 30, 08:57 UTC 62 194.126.33.0/24 AS25122
Aug 30, 08:57 UTC 56 194.35.236.0/23 AS49007
Aug 30, 08:57 UTC 58 45.71.92.0/22 AS267606
Aug 30, 08:57 UTC 56 45.161.231.0/24 AS268483
Aug 30, 08:57 UTC 56 170.245.84.0/22 AS265028
Aug 30, 08:57 UTC 58 187.87.198.0/23 AS262687
Aug 30, 08:57 UTC 58 45.6.197.0/24 AS266563
Aug 30, 08:57 UTC 56 45.231.100.0/22 AS267236
Aug 30, 08:57 UTC 56 196.216.166.0/24 AS37513
Aug 30, 08:57 UTC 58 170.79.175.0/24 AS266303
Aug 30, 08:57 UTC 56 179.48.21.0/24 AS271063
Aug 30, 08:57 UTC 56 177.124.166.0/23 AS262769
Aug 30, 08:57 UTC 60 200.142.232.0/23 AS270687
Aug 30, 08:57 UTC 60 190.89.252.0/23 AS270414
Aug 30, 08:57 UTC 56 187.1.112.0/20 AS53163
Aug 30, 08:57 UTC 58 170.79.174.0/24 AS266303
Aug 30, 08:57 UTC 58 170.79.173.0/24 AS266303
Aug 30, 08:57 UTC 56 170.245.84.0/23 AS265028
Aug 30, 08:57 UTC 56 131.196.7.0/24 AS265890
Aug 30, 08:57 UTC 58 45.6.196.0/24 AS266563
Aug 30, 08:57 UTC 56 170.84.250.0/23 AS265028
Aug 30, 08:57 UTC 56 45.231.100.0/23 AS267236
Aug 30, 08:57 UTC 58 45.237.180.0/24 AS268283
Aug 30, 08:57 UTC 58 170.233.88.0/22 AS265247
Aug 30, 08:57 UTC 58 177.128.100.0/23 AS262769
Aug 30, 08:57 UTC 60 186.194.94.0/23 AS28249
Aug 30, 08:57 UTC 56 196.216.164.0/23 AS37513
Aug 30, 08:57 UTC 56 170.84.249.0/24 AS265028
Aug 30, 08:57 UTC 60 190.89.253.0/24 AS270414
Aug 30, 08:57 UTC 58 45.71.94.0/23 AS267606
Aug 30, 08:57 UTC 56 196.216.164.0/24 AS37513
Aug 30, 08:57 UTC 60 189.113.183.0/24 AS270334
Aug 30, 08:57 UTC 56 45.224.112.0/24 AS267657
Aug 30, 08:57 UTC 56 186.235.186.0/24 AS61888
Aug 30, 08:57 UTC 56 186.235.187.0/24 AS61888
Aug 30, 08:57 UTC 58 177.85.64.0/21 AS262600
Aug 30, 08:57 UTC 58 177.128.102.0/23 AS262769
Aug 30, 08:57 UTC 60 190.89.252.0/24 AS270414
Aug 30, 08:57 UTC 58 177.8.92.0/24 AS52890
Aug 30, 08:57 UTC 56 177.155.144.0/23 AS262769
Aug 30, 08:57 UTC 58 201.182.204.0/22 AS267555
Aug 30, 08:57 UTC 56 196.216.166.0/23 AS37513
Aug 30, 08:57 UTC 58 45.237.183.0/24 AS268283
Aug 30, 08:57 UTC 56 45.70.172.0/22 AS267584
Aug 30, 08:57 UTC 56 196.216.165.0/24 AS37513
Aug 30, 08:57 UTC 58 200.71.84.0/23 AS271076
Aug 30, 08:57 UTC 56 200.106.208.0/22 AS271248
Aug 30, 08:57 UTC 58 45.71.92.0/23 AS267606
Aug 30, 08:57 UTC 56 196.216.167.0/24 AS37513
Aug 30, 08:57 UTC 56 177.130.81.0/24 AS262369
Aug 30, 08:57 UTC 56 131.196.4.0/24 AS265890
Aug 30, 08:57 UTC 58 45.237.182.0/24 AS268283
Aug 30, 08:57 UTC 56 170.245.86.0/23 AS265028
Aug 30, 08:57 UTC 56 45.161.228.0/22 AS268483
Aug 30, 08:57 UTC 58 45.4.244.0/24 AS266065
Aug 30, 07:57 UTC 56 195.47.195.0/24 AS196624
Aug 30, 07:57 UTC 56 177.73.48.0/23 AS262565
Aug 30, 07:57 UTC 56 131.0.23.0/24 AS28327
Aug 30, 07:57 UTC 58 168.90.180.0/23 AS262491
Aug 30, 07:57 UTC 56 170.81.74.0/23 AS262491
Aug 30, 07:57 UTC 56 158.66.4.0/24 AS21111
Aug 30, 07:57 UTC 56 131.0.21.0/24 AS28327
Aug 30, 07:57 UTC 56 158.66.2.0/24 AS21111
Aug 30, 07:57 UTC 56 131.0.22.0/24 AS28327
Aug 30, 07:57 UTC 56 189.50.80.0/24 AS28327
Aug 30, 07:57 UTC 56 103.214.13.0/24 AS135345
Aug 30, 07:57 UTC 56 189.50.84.0/24 AS28327
Aug 30, 07:57 UTC 58 189.91.172.0/24 AS271300
Aug 30, 07:57 UTC 56 170.84.99.0/24 AS264992
Aug 30, 07:57 UTC 56 189.50.81.0/24 AS28327
Aug 30, 07:57 UTC 56 185.167.242.0/24 AS24953
Aug 30, 07:57 UTC 56 189.50.92.0/24 AS28327
Aug 30, 07:57 UTC 56 158.66.6.0/24 AS21111
Aug 30, 07:57 UTC 56 185.34.196.0/22 AS24953
Aug 30, 07:57 UTC 56 195.95.163.0/24 AS24953
Aug 30, 07:57 UTC 56 168.0.140.0/23 AS262565
Aug 30, 07:57 UTC 56 202.92.156.0/24 AS132796
Aug 30, 07:57 UTC 56 194.34.227.0/24 AS24953
Aug 30, 07:57 UTC 56 77.90.9.0/24 AS212049
Aug 30, 07:57 UTC 56 177.234.204.0/24 AS52468
Aug 30, 07:57 UTC 56 158.66.1.0/24 AS21111
Aug 30, 07:57 UTC 56 196.41.96.0/19 AS36874
Aug 30, 07:57 UTC 56 177.130.90.0/24 AS262369
Aug 30, 07:57 UTC 56 170.84.97.0/24 AS264992
Aug 30, 07:57 UTC 56 177.105.216.0/24 AS262653
Aug 30, 07:57 UTC 56 158.66.5.0/24 AS21111
Aug 30, 07:57 UTC 56 103.214.15.0/24 AS135345
Aug 30, 07:57 UTC 58 189.91.174.0/24 AS271300
Aug 30, 07:57 UTC 56 189.50.87.0/24 AS28327
Aug 30, 07:57 UTC 56 185.167.243.0/24 AS24953
Aug 30, 07:57 UTC 56 185.213.124.0/22 AS24953
Aug 30, 07:57 UTC 56 189.50.86.0/24 AS28327
Aug 30, 07:57 UTC 56 94.188.250.0/24 AS212719
Aug 30, 07:57 UTC 56 170.81.63.0/24 AS266401
Aug 30, 07:57 UTC 56 189.50.89.0/24 AS28327
Aug 30, 07:57 UTC 56 185.224.120.0/22 AS24953
Aug 30, 07:57 UTC 56 158.66.0.0/16 AS21111
Aug 30, 07:57 UTC 56 83.216.192.0/20 AS24953
Aug 30, 07:57 UTC 56 144.48.29.0/24 AS135345
Aug 30, 07:57 UTC 56 185.167.240.0/24 AS24953
Aug 30, 07:57 UTC 56 185.13.56.0/24 AS43260
Aug 30, 07:57 UTC 56 177.105.218.0/24 AS262653
Aug 30, 07:57 UTC 56 82.177.56.0/24 AS214802
Aug 30, 07:57 UTC 56 157.97.68.0/22 AS24953
Aug 30, 07:57 UTC 56 144.48.30.0/24 AS135345
Aug 30, 07:57 UTC 56 189.127.152.0/23 AS270706

Frequently Asked Questions

What is a BGP AS-path anomaly?

An AS-path anomaly is an unusual or implausible sequence of Autonomous Systems in a route advertisement whose unique-AS-path length (prepends collapsed) deviates sharply from the recent 36-hour median for that prefix — an unexpected transit AS, a loop, or a sudden detour. It can reveal a route leak or a path-prepending mistake.

Where does this data come from?

Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.

How often is the AS-path anomaly feed updated?

The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-08-30 11:55 UTC.

How do I subscribe to AS-path anomaly events?

Subscribe to the Atom feed at /pulse/bgp/aspath.atom or poll the JSON endpoint at /api/pulse/bgp/aspath.

Share