Skip to main content

Pulse — AS-path anomaly

Unique-AS-path lengths (prepends collapsed) that deviate sharply from the recent 36-hour median for that prefix.

Events last 24h
2,076
Most recent
Showing
200
Refresh
every 60s

What is AS-path anomaly?

An AS-path anomaly is an unusual or implausible sequence of Autonomous Systems in a route advertisement whose unique-AS-path length (prepends collapsed) deviates sharply from the recent 36-hour median for that prefix — an unexpected transit AS, a loop, or a sudden detour. It can reveal a route leak or a path-prepending mistake.

Geographic distribution

Flagged events

Showing 200 most recent of 2,076 · last 24h
Most recent AS-path anomaly events detected across RIPE RIS collectors in the last 24 hours
When Severity Prefix AS
Aug 22, 06:31 UTC 56 200.47.162.0/24 AS7908
Aug 22, 06:31 UTC 56 200.47.122.0/23 AS7908
Aug 22, 06:31 UTC 56 200.47.74.0/24 AS7908
Aug 22, 06:31 UTC 56 200.47.83.0/24 AS7908
Aug 22, 06:31 UTC 56 200.47.104.0/24 AS7908
Aug 22, 06:31 UTC 56 200.47.52.0/22 AS7908
Aug 22, 06:31 UTC 58 177.73.68.0/24 AS52698
Aug 22, 06:31 UTC 56 200.47.123.0/24 AS7908
Aug 22, 06:31 UTC 56 200.47.80.0/22 AS7908
Aug 22, 06:31 UTC 56 200.47.248.0/21 AS7908
Aug 22, 06:31 UTC 56 200.47.92.0/24 AS7908
Aug 22, 06:31 UTC 56 200.47.109.0/24 AS7908
Aug 22, 06:31 UTC 56 200.47.165.0/24 AS7908
Aug 22, 06:31 UTC 56 200.47.104.0/23 AS7908
Aug 22, 06:31 UTC 56 200.47.112.0/22 AS7908
Aug 22, 06:31 UTC 56 200.47.144.0/24 AS7908
Aug 22, 06:31 UTC 56 185.177.72.0/24 AS211590
Aug 22, 06:31 UTC 56 200.47.56.0/21 AS7908
Aug 22, 06:31 UTC 56 200.47.119.0/24 AS7908
Aug 22, 06:31 UTC 56 200.47.78.0/24 AS7908
Aug 22, 06:31 UTC 56 200.47.196.0/24 AS7908
Aug 22, 06:31 UTC 56 170.81.63.0/24 AS266401
Aug 22, 06:31 UTC 56 200.47.100.0/22 AS7908
Aug 22, 06:31 UTC 56 200.47.62.0/24 AS7908
Aug 22, 06:31 UTC 56 200.47.116.0/23 AS7908
Aug 22, 06:31 UTC 58 177.73.69.0/24 AS52698
Aug 22, 06:31 UTC 56 200.47.93.0/24 AS7908
Aug 22, 06:31 UTC 56 200.47.86.0/24 AS7908
Aug 22, 06:31 UTC 56 200.47.58.0/24 AS7908
Aug 22, 06:31 UTC 56 200.47.107.0/24 AS7908
Aug 22, 06:31 UTC 56 200.47.96.0/24 AS7908
Aug 22, 06:31 UTC 56 143.246.210.0/24 AS200019
Aug 22, 06:31 UTC 56 200.47.121.0/24 AS7908
Aug 22, 06:31 UTC 56 200.47.50.0/23 AS7908
Aug 22, 06:31 UTC 56 200.47.106.0/23 AS7908
Aug 22, 06:31 UTC 56 200.47.128.0/21 AS7908
Aug 22, 06:31 UTC 56 200.47.64.0/21 AS7908
Aug 22, 06:31 UTC 56 67.221.252.0/24 AS8038
Aug 22, 06:31 UTC 56 200.47.127.0/24 AS7908
Aug 22, 06:31 UTC 56 200.47.55.0/24 AS7908
Aug 22, 06:31 UTC 56 200.47.167.0/24 AS7908
Aug 22, 06:31 UTC 56 170.39.217.0/24 AS211590
Aug 22, 06:31 UTC 56 200.47.240.0/21 AS7908
Aug 22, 06:31 UTC 56 200.47.105.0/24 AS7908
Aug 22, 06:31 UTC 56 200.47.92.0/22 AS7908
Aug 22, 06:31 UTC 56 200.47.224.0/22 AS7908
Aug 22, 06:31 UTC 56 200.47.108.0/22 AS7908
Aug 22, 06:31 UTC 56 200.47.126.0/24 AS7908
Aug 22, 06:31 UTC 56 200.47.232.0/21 AS7908
Aug 22, 05:31 UTC 62 103.20.219.0/24 AS149968
Aug 22, 05:31 UTC 56 200.47.163.0/24 AS7908
Aug 22, 05:31 UTC 56 200.47.148.0/24 AS7908
Aug 22, 05:31 UTC 56 200.47.108.0/24 AS7908
Aug 22, 05:31 UTC 56 112.78.39.0/24 AS55666
Aug 22, 05:31 UTC 56 193.142.44.0/24 AS47780
Aug 22, 05:31 UTC 56 103.210.226.0/24 AS151358
Aug 22, 05:31 UTC 56 193.142.47.0/24 AS47780
Aug 22, 05:31 UTC 56 94.124.65.0/24 AS51185
Aug 22, 05:31 UTC 56 200.47.49.0/24 AS7908
Aug 22, 05:31 UTC 56 200.47.161.0/24 AS7908
Aug 22, 05:31 UTC 56 200.47.168.0/24 AS7908
Aug 22, 05:31 UTC 56 193.142.45.0/24 AS47780
Aug 22, 05:31 UTC 58 103.106.72.0/24 AS136883
Aug 22, 05:31 UTC 56 200.47.50.0/24 AS7908
Aug 22, 05:31 UTC 60 200.180.165.0/24 AS401776
Aug 22, 05:31 UTC 56 200.47.98.0/24 AS7908
Aug 22, 05:31 UTC 56 200.219.154.0/24 AS11644
Aug 22, 05:31 UTC 56 182.237.23.0/24 AS55309
Aug 22, 05:31 UTC 56 116.254.112.0/24 AS55666
Aug 22, 05:31 UTC 56 200.47.90.0/23 AS7908
Aug 22, 05:31 UTC 56 202.37.133.0/24 AS152687
Aug 22, 05:31 UTC 56 201.159.176.0/22 AS28373
Aug 22, 05:31 UTC 56 192.23.18.0/24 AS7468
Aug 22, 04:30 UTC 56 23.226.4.0/24 AS23881
Aug 22, 04:30 UTC 56 194.76.155.0/24 AS34534
Aug 22, 04:30 UTC 56 41.177.0.0/16 AS36874
Aug 22, 04:30 UTC 56 164.160.44.0/23 AS328032
Aug 22, 04:30 UTC 56 191.36.244.0/24 AS263345
Aug 22, 04:30 UTC 56 45.121.198.0/24 AS23881
Aug 22, 04:30 UTC 56 45.121.200.0/24 AS23881
Aug 22, 04:30 UTC 56 194.55.189.0/24 AS34534
Aug 22, 04:30 UTC 56 45.112.194.0/24 AS41745
Aug 22, 04:30 UTC 56 91.238.181.0/24 AS49434
Aug 22, 04:30 UTC 56 45.121.197.0/24 AS23881
Aug 22, 04:30 UTC 56 194.59.221.0/24 AS34534
Aug 22, 04:30 UTC 56 103.15.192.0/24 AS23881
Aug 22, 04:30 UTC 56 191.36.245.0/24 AS263345
Aug 22, 04:30 UTC 56 194.124.250.0/24 AS34534
Aug 22, 04:30 UTC 56 138.124.31.0/24 AS41745
Aug 22, 04:30 UTC 56 83.171.226.0/24 AS41745
Aug 22, 04:30 UTC 56 23.226.6.0/24 AS23881
Aug 22, 04:30 UTC 56 194.59.245.0/24 AS34534
Aug 22, 04:30 UTC 56 45.144.29.0/24 AS41745
Aug 22, 04:30 UTC 56 105.233.0.0/16 AS36874
Aug 22, 04:30 UTC 56 111.118.138.0/23 AS38623
Aug 22, 04:30 UTC 56 87.232.79.0/24 AS49434
Aug 22, 04:30 UTC 56 45.121.203.0/24 AS23881
Aug 22, 04:30 UTC 56 191.36.247.0/24 AS263345
Aug 22, 04:30 UTC 56 23.226.1.0/24 AS23881
Aug 22, 04:30 UTC 56 213.5.130.0/24 AS34534
Aug 22, 04:30 UTC 56 79.110.237.0/24 AS49434
Aug 22, 04:30 UTC 56 103.15.194.0/24 AS23881
Aug 22, 04:30 UTC 56 45.144.28.0/24 AS41745
Aug 22, 04:30 UTC 58 91.220.135.0/24 AS197392
Aug 22, 04:30 UTC 56 191.36.241.0/24 AS263345
Aug 22, 04:30 UTC 56 185.142.53.0/24 AS34534
Aug 22, 04:30 UTC 56 45.121.199.0/24 AS23881
Aug 22, 04:30 UTC 56 103.15.196.0/24 AS23881
Aug 22, 04:30 UTC 56 203.135.138.0/24 AS23881
Aug 22, 04:30 UTC 56 45.140.167.0/24 AS41745
Aug 22, 04:30 UTC 56 103.15.197.0/24 AS23881
Aug 22, 04:30 UTC 56 111.118.136.0/23 AS38623
Aug 22, 04:30 UTC 56 194.76.147.0/24 AS34534
Aug 22, 04:30 UTC 56 191.36.253.0/24 AS263345
Aug 22, 04:30 UTC 56 194.76.146.0/24 AS34534
Aug 22, 04:30 UTC 56 23.226.0.0/24 AS23881
Aug 22, 04:30 UTC 56 191.36.242.0/24 AS263345
Aug 22, 04:30 UTC 56 191.36.243.0/24 AS263345
Aug 22, 04:30 UTC 56 194.55.137.0/24 AS34534
Aug 22, 04:30 UTC 56 83.171.225.0/24 AS41745
Aug 22, 04:30 UTC 56 138.124.251.0/24 AS41745
Aug 22, 04:30 UTC 56 103.15.199.0/24 AS23881
Aug 22, 04:30 UTC 56 191.36.250.0/24 AS263345
Aug 22, 04:30 UTC 56 160.25.214.0/23 AS131716
Aug 22, 04:30 UTC 56 45.121.192.0/24 AS23881
Aug 22, 04:30 UTC 56 175.100.118.0/23 AS38623
Aug 22, 04:30 UTC 56 164.160.46.0/23 AS328032
Aug 22, 04:30 UTC 56 191.36.255.0/24 AS263345
Aug 22, 04:30 UTC 56 191.36.254.0/24 AS263345
Aug 22, 04:30 UTC 56 23.226.8.0/24 AS23881
Aug 22, 04:30 UTC 56 196.22.240.0/20 AS36874
Aug 22, 04:30 UTC 56 119.161.136.0/24 AS63631
Aug 22, 04:30 UTC 56 160.20.24.0/22 AS328032
Aug 22, 04:30 UTC 56 170.39.219.0/24 AS49434
Aug 22, 04:30 UTC 58 191.36.248.0/24 AS263345
Aug 22, 04:30 UTC 56 138.124.70.0/24 AS41745
Aug 22, 04:30 UTC 56 191.36.240.0/24 AS263345
Aug 22, 04:30 UTC 56 194.124.251.0/24 AS34534
Aug 22, 04:30 UTC 56 191.36.251.0/24 AS263345
Aug 22, 04:30 UTC 56 165.101.7.0/24 AS136516
Aug 22, 04:30 UTC 56 194.76.154.0/24 AS34534
Aug 22, 04:30 UTC 56 191.36.252.0/24 AS263345
Aug 22, 04:30 UTC 56 175.100.112.0/23 AS38623
Aug 22, 04:30 UTC 58 82.147.68.0/24 AS197392
Aug 22, 04:30 UTC 56 196.41.96.0/19 AS36874
Aug 22, 04:30 UTC 56 203.135.131.0/24 AS23881
Aug 22, 04:30 UTC 56 45.81.243.0/24 AS41745
Aug 22, 04:30 UTC 56 203.135.130.0/24 AS23881
Aug 22, 04:30 UTC 56 191.36.249.0/24 AS263345
Aug 22, 04:30 UTC 56 143.0.52.0/24 AS263997
Aug 22, 04:30 UTC 56 141.98.84.0/24 AS41745
Aug 22, 04:30 UTC 58 82.147.91.0/24 AS197392
Aug 22, 04:30 UTC 56 191.36.246.0/24 AS263345
Aug 22, 04:30 UTC 56 23.226.3.0/24 AS23881
Aug 22, 04:30 UTC 56 146.19.230.0/24 AS41745
Aug 22, 04:30 UTC 56 203.135.129.0/24 AS23881
Aug 22, 04:30 UTC 56 130.49.179.0/24 AS41745
Aug 22, 04:30 UTC 56 45.115.182.0/24 AS38623
Aug 22, 04:30 UTC 56 111.118.158.0/23 AS38623
Aug 22, 04:30 UTC 56 203.135.128.0/24 AS23881
Aug 22, 04:30 UTC 56 83.171.227.0/24 AS41745
Aug 22, 03:30 UTC 58 209.248.0.0/24 AS153771
Aug 22, 03:30 UTC 56 52.128.224.0/21 AS45753
Aug 22, 03:30 UTC 58 136.210.0.0/16 AS1555
Aug 22, 03:30 UTC 56 209.146.57.0/24 AS132337
Aug 22, 03:30 UTC 56 202.128.74.0/23 AS3605
Aug 22, 03:30 UTC 56 101.99.128.0/18 AS3605
Aug 22, 03:30 UTC 56 37.143.55.0/24 AS198507
Aug 22, 03:30 UTC 56 43.225.198.0/23 AS45753
Aug 22, 03:30 UTC 56 200.47.87.0/24 AS7908
Aug 22, 03:30 UTC 58 103.25.125.0/24 AS153771
Aug 22, 03:30 UTC 56 202.128.68.0/24 AS3605
Aug 22, 03:30 UTC 56 202.128.77.0/24 AS3605
Aug 22, 03:30 UTC 56 202.128.66.0/23 AS3605
Aug 22, 03:30 UTC 56 202.128.16.0/20 AS3605
Aug 22, 03:30 UTC 56 112.121.160.0/20 AS45753
Aug 22, 03:30 UTC 56 112.121.176.0/21 AS45753
Aug 22, 03:30 UTC 56 121.55.192.0/19 AS3605
Aug 22, 03:30 UTC 56 202.131.160.0/20 AS3605
Aug 22, 03:30 UTC 56 52.128.232.0/22 AS45753
Aug 22, 03:30 UTC 56 101.99.192.0/18 AS3605
Aug 22, 03:30 UTC 56 202.128.72.0/24 AS3605
Aug 22, 03:30 UTC 56 121.55.224.0/19 AS3605
Aug 22, 03:30 UTC 56 200.47.192.0/21 AS7908
Aug 22, 03:30 UTC 56 102.135.181.0/24 AS16509
Aug 22, 03:30 UTC 56 52.128.236.0/23 AS45753
Aug 22, 03:30 UTC 60 84.205.69.0/24 AS12654
Aug 22, 03:30 UTC 56 202.131.176.0/20 AS3605
Aug 22, 03:30 UTC 56 202.128.64.0/20 AS3605
Aug 22, 03:30 UTC 56 112.121.188.0/22 AS45753
Aug 22, 03:30 UTC 56 202.128.0.0/20 AS3605
Aug 22, 03:30 UTC 56 202.128.80.0/20 AS3605
Aug 22, 03:30 UTC 56 52.128.248.0/21 AS45753
Aug 22, 02:31 UTC 56 116.109.200.0/21 AS7552
Aug 22, 02:31 UTC 56 171.245.248.0/21 AS7552
Aug 22, 02:31 UTC 56 111.235.132.0/24 AS55547
Aug 22, 02:31 UTC 56 171.236.208.0/21 AS7552
Aug 22, 02:31 UTC 56 171.235.160.0/21 AS7552
Aug 22, 02:31 UTC 56 115.73.160.0/21 AS7552
Aug 22, 02:31 UTC 56 171.249.152.0/21 AS7552

Frequently Asked Questions

What is a BGP AS-path anomaly?

An AS-path anomaly is an unusual or implausible sequence of Autonomous Systems in a route advertisement whose unique-AS-path length (prepends collapsed) deviates sharply from the recent 36-hour median for that prefix — an unexpected transit AS, a loop, or a sudden detour. It can reveal a route leak or a path-prepending mistake.

Where does this data come from?

Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.

How often is the AS-path anomaly feed updated?

The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-08-22 07:30 UTC.

How do I subscribe to AS-path anomaly events?

Subscribe to the Atom feed at /pulse/bgp/aspath.atom or poll the JSON endpoint at /api/pulse/bgp/aspath.

Share