Skip to main content
WorldIP.io

Pulse — AS-path anomaly

Unique-AS-path lengths (prepends collapsed) that deviate sharply from the recent 36-hour median for that prefix.

⇲ Atom All feeds ←
Events last 24h
2,569
Most recent
Showing
200
Refresh
● every 60s

What is AS-path anomaly?

An AS-path anomaly is an unusual or implausible sequence of Autonomous Systems in a route advertisement whose unique-AS-path length (prepends collapsed) deviates sharply from the recent 36-hour median for that prefix — an unexpected transit AS, a loop, or a sudden detour. It can reveal a route leak or a path-prepending mistake.

Geographic distribution

Flagged events

Showing 200 most recent of 2,569 · last 24h
Most recent AS-path anomaly events detected across RIPE RIS collectors in the last 24 hours
When Severity Prefix AS
Aug 30, 05:57 UTC 56 91.141.64.0/20 AS25255
Aug 30, 05:57 UTC 56 120.28.28.0/24 AS23689
Aug 30, 05:57 UTC 56 185.106.168.0/22 AS49633
Aug 30, 05:57 UTC 56 91.210.131.0/24 AS44279
Aug 30, 05:57 UTC 56 194.41.12.0/22 AS25495
Aug 30, 05:57 UTC 58 177.124.36.0/23 AS52861
Aug 30, 05:57 UTC 58 177.124.36.0/22 AS52861
Aug 30, 05:57 UTC 56 1.1.252.0/24 AS23969
Aug 30, 05:57 UTC 56 109.94.245.0/24 AS50086
Aug 30, 05:57 UTC 56 91.224.144.0/23 AS56752
Aug 30, 05:57 UTC 56 1.2.252.0/24 AS23969
Aug 30, 05:57 UTC 56 194.35.236.0/23 AS49007
Aug 30, 05:57 UTC 56 82.177.195.0/24 AS197142
Aug 30, 05:57 UTC 56 85.217.184.0/23 AS61098
Aug 30, 05:57 UTC 56 1.4.214.0/24 AS23969
Aug 30, 05:57 UTC 56 195.136.176.0/22 AS199390
Aug 30, 05:57 UTC 56 183.78.190.0/23 AS18283
Aug 30, 05:57 UTC 56 185.202.127.0/24 AS198595
Aug 30, 05:57 UTC 56 158.66.0.0/16 AS21111
Aug 30, 05:57 UTC 58 177.124.32.0/22 AS52861
Aug 30, 05:57 UTC 56 82.177.30.0/23 AS199260
Aug 30, 05:57 UTC 58 177.93.144.0/22 AS52861
Aug 30, 05:57 UTC 56 188.172.244.0/24 AS42473
Aug 30, 05:57 UTC 56 5.61.128.0/20 AS58243
Aug 30, 05:57 UTC 56 109.94.242.0/24 AS50086
Aug 30, 05:57 UTC 56 194.49.106.0/24 AS56373
Aug 30, 05:57 UTC 56 45.130.210.0/24 AS34903
Aug 30, 05:57 UTC 56 92.63.32.0/20 AS49633
Aug 30, 05:57 UTC 56 37.252.238.0/24 AS42473
Aug 30, 05:57 UTC 56 78.153.132.0/23 AS28738
Aug 30, 05:57 UTC 56 5.61.160.0/20 AS58243
Aug 30, 05:57 UTC 56 5.100.247.0/24 AS204128
Aug 30, 05:57 UTC 56 1.1.200.0/21 AS23969
Aug 30, 05:57 UTC 56 1.1.251.0/24 AS23969
Aug 30, 05:57 UTC 56 38.190.110.0/24 AS212616
Aug 30, 05:57 UTC 56 91.141.32.0/19 AS25255
Aug 30, 05:57 UTC 56 185.32.48.0/24 AS200244
Aug 30, 05:57 UTC 56 195.136.108.0/24 AS215903
Aug 30, 05:57 UTC 56 1.0.204.0/24 AS23969
Aug 30, 05:57 UTC 56 1.1.220.0/24 AS23969
Aug 30, 05:57 UTC 56 81.15.217.0/24 AS205990
Aug 30, 05:57 UTC 56 78.41.24.0/21 AS48022
Aug 30, 05:57 UTC 56 45.130.208.0/24 AS34903
Aug 30, 05:57 UTC 56 1.0.224.0/20 AS23969
Aug 30, 05:57 UTC 56 91.239.205.0/24 AS198835
Aug 30, 05:57 UTC 56 158.66.2.0/24 AS21111
Aug 30, 05:57 UTC 56 1.1.192.0/21 AS23969
Aug 30, 05:57 UTC 56 1.0.170.0/24 AS23969
Aug 30, 05:57 UTC 56 63.254.171.0/24 AS20326
Aug 30, 05:57 UTC 56 193.35.36.0/24 AS198937
Aug 30, 05:57 UTC 56 1.0.196.0/24 AS23969
Aug 30, 05:57 UTC 56 1.4.213.0/24 AS23969
Aug 30, 05:57 UTC 56 185.18.132.0/22 AS199390
Aug 30, 05:57 UTC 58 177.93.146.0/23 AS52861
Aug 30, 05:57 UTC 56 1.0.205.0/24 AS23969
Aug 30, 05:57 UTC 56 81.15.246.0/24 AS25070
Aug 30, 05:57 UTC 56 1.0.128.0/24 AS23969
Aug 30, 05:57 UTC 56 5.2.58.0/23 AS41560
Aug 30, 05:57 UTC 56 109.94.241.0/24 AS50086
Aug 30, 05:57 UTC 56 5.2.60.0/22 AS41560
Aug 30, 05:57 UTC 56 1.179.235.0/24 AS23969
Aug 30, 05:57 UTC 56 5.2.44.0/22 AS41560
Aug 30, 05:57 UTC 56 37.0.113.0/24 AS10780
Aug 30, 05:57 UTC 56 1.4.250.0/23 AS23969
Aug 30, 05:57 UTC 56 45.130.208.0/22 AS34903
Aug 30, 05:57 UTC 56 81.15.237.0/24 AS203279
Aug 30, 05:57 UTC 56 109.94.248.0/24 AS50086
Aug 30, 05:57 UTC 58 177.124.32.0/23 AS52861
Aug 30, 05:57 UTC 56 88.220.72.0/24 AS199823
Aug 30, 05:57 UTC 56 1.2.240.0/21 AS23969
Aug 30, 05:57 UTC 58 177.93.144.0/23 AS52861
Aug 30, 05:57 UTC 56 158.66.1.0/24 AS21111
Aug 30, 05:57 UTC 56 91.210.130.0/24 AS44279
Aug 30, 05:57 UTC 56 89.255.64.0/19 AS41601
Aug 30, 05:57 UTC 56 62.76.166.0/24 AS62379
Aug 30, 05:57 UTC 56 1.1.208.0/21 AS23969
Aug 30, 05:57 UTC 56 91.235.16.0/22 AS204295
Aug 30, 05:57 UTC 56 81.15.155.0/24 AS211388
Aug 30, 05:57 UTC 56 185.41.94.0/23 AS199953
Aug 30, 05:57 UTC 56 5.2.56.0/24 AS41560
Aug 30, 05:57 UTC 56 88.199.162.0/24 AS42923
Aug 30, 05:57 UTC 56 69.41.54.0/24 AS19197
Aug 30, 05:57 UTC 56 157.25.57.0/24 AS206770
Aug 30, 05:57 UTC 56 120.28.29.0/24 AS23689
Aug 30, 05:57 UTC 56 1.1.240.0/21 AS23969
Aug 30, 05:57 UTC 56 88.220.51.0/24 AS209296
Aug 30, 05:57 UTC 56 192.68.51.0/24 AS198743
Aug 30, 05:57 UTC 56 82.177.201.0/24 AS42246
Aug 30, 05:57 UTC 56 91.231.92.0/24 AS47672
Aug 30, 05:57 UTC 56 145.237.221.0/24 AS34339
Aug 30, 05:57 UTC 56 185.13.144.0/22 AS49633
Aug 30, 05:57 UTC 56 31.132.64.0/21 AS56945
Aug 30, 05:57 UTC 56 189.84.36.0/24 AS270538
Aug 30, 05:57 UTC 56 1.2.239.0/24 AS23969
Aug 30, 05:57 UTC 56 193.43.12.0/23 AS204295
Aug 30, 05:57 UTC 56 85.217.172.0/23 AS61098
Aug 30, 05:57 UTC 56 183.78.188.0/23 AS18283
Aug 30, 05:57 UTC 56 1.179.232.0/24 AS23969
Aug 30, 05:57 UTC 56 158.66.4.0/24 AS21111
Aug 30, 05:57 UTC 56 45.130.209.0/24 AS34903
Aug 30, 05:57 UTC 56 196.41.96.0/19 AS36874
Aug 30, 05:57 UTC 56 195.182.35.0/24 AS47290
Aug 30, 05:57 UTC 58 177.124.38.0/23 AS52861
Aug 30, 05:57 UTC 56 1.0.165.0/24 AS23969
Aug 30, 05:57 UTC 56 195.136.121.0/24 AS204412
Aug 30, 05:57 UTC 56 88.220.138.0/24 AS210587
Aug 30, 05:57 UTC 56 109.94.240.0/20 AS50086
Aug 30, 05:57 UTC 56 109.94.250.0/24 AS50086
Aug 30, 05:57 UTC 56 1.1.249.0/24 AS23969
Aug 30, 05:57 UTC 56 195.136.158.0/23 AS199260
Aug 30, 05:57 UTC 56 144.208.220.0/24 AS42473
Aug 30, 05:57 UTC 56 5.2.55.0/24 AS41560
Aug 30, 05:57 UTC 56 88.220.71.0/24 AS199694
Aug 30, 05:57 UTC 56 1.0.133.0/24 AS23969
Aug 30, 05:57 UTC 56 1.2.224.0/21 AS23969
Aug 30, 05:57 UTC 56 91.218.196.0/22 AS51393
Aug 30, 05:57 UTC 56 91.216.202.0/24 AS197135
Aug 30, 05:57 UTC 56 158.66.5.0/24 AS21111
Aug 30, 05:57 UTC 56 1.0.171.0/24 AS23969
Aug 30, 05:57 UTC 56 185.247.252.0/24 AS200369
Aug 30, 05:57 UTC 58 177.93.148.0/23 AS52861
Aug 30, 05:57 UTC 56 45.144.42.0/24 AS208992
Aug 30, 05:57 UTC 56 89.207.144.0/22 AS47576
Aug 30, 05:57 UTC 56 158.66.6.0/24 AS21111
Aug 30, 05:57 UTC 56 82.177.190.0/24 AS197903
Aug 30, 05:57 UTC 56 195.136.78.0/24 AS199260
Aug 30, 05:57 UTC 56 1.0.206.0/24 AS23969
Aug 30, 05:57 UTC 56 80.241.128.0/21 AS16296
Aug 30, 05:57 UTC 56 91.197.61.0/24 AS43438
Aug 30, 05:57 UTC 56 185.202.126.0/24 AS198595
Aug 30, 05:57 UTC 56 5.254.184.0/21 AS199205
Aug 30, 05:57 UTC 56 94.245.192.0/24 AS25255
Aug 30, 05:57 UTC 56 88.220.55.0/24 AS213530
Aug 30, 05:57 UTC 56 145.237.222.0/24 AS34339
Aug 30, 05:57 UTC 56 109.94.249.0/24 AS50086
Aug 30, 05:57 UTC 56 1.4.215.0/24 AS23969
Aug 30, 05:57 UTC 56 91.209.153.0/24 AS41253
Aug 30, 05:57 UTC 56 5.2.57.0/24 AS41560
Aug 30, 05:57 UTC 56 5.61.144.0/20 AS58243
Aug 30, 05:57 UTC 56 85.93.128.0/19 AS34300
Aug 30, 05:57 UTC 56 1.1.221.0/24 AS23969
Aug 30, 05:57 UTC 56 82.160.29.0/24 AS61256
Aug 30, 05:57 UTC 56 5.61.176.0/20 AS58243
Aug 30, 05:57 UTC 56 82.177.128.0/24 AS206093
Aug 30, 05:57 UTC 56 213.227.180.0/24 AS42473
Aug 30, 05:57 UTC 56 91.198.194.0/24 AS43867
Aug 30, 05:57 UTC 56 46.231.152.0/21 AS34999
Aug 30, 05:57 UTC 56 5.61.160.0/19 AS58243
Aug 30, 05:57 UTC 58 177.93.148.0/22 AS52861
Aug 30, 05:57 UTC 56 185.41.92.0/24 AS199953
Aug 30, 05:57 UTC 56 81.15.145.0/24 AS205034
Aug 30, 05:57 UTC 56 81.15.218.0/24 AS207764
Aug 30, 05:57 UTC 56 88.220.164.0/24 AS209388
Aug 30, 05:57 UTC 56 91.132.73.0/24 AS212563
Aug 30, 05:57 UTC 56 185.202.124.0/24 AS198595
Aug 30, 05:57 UTC 56 200.189.48.0/21 AS14204
Aug 30, 05:57 UTC 56 1.1.232.0/21 AS23969
Aug 30, 05:57 UTC 56 195.136.12.0/23 AS199260
Aug 30, 05:57 UTC 56 185.255.252.0/22 AS199390
Aug 30, 05:57 UTC 58 177.124.34.0/23 AS52861
Aug 30, 05:57 UTC 56 195.136.76.0/24 AS202403
Aug 30, 05:57 UTC 56 62.173.128.0/19 AS34300
Aug 30, 05:57 UTC 56 193.104.166.0/24 AS34986
Aug 30, 05:57 UTC 56 1.4.212.0/24 AS23969
Aug 30, 05:57 UTC 58 114.130.70.0/24 AS17806
Aug 30, 05:57 UTC 56 189.84.37.0/24 AS270538
Aug 30, 05:57 UTC 56 5.2.48.0/21 AS41560
Aug 30, 05:57 UTC 58 177.93.144.0/21 AS52861
Aug 30, 05:57 UTC 56 82.177.56.0/24 AS214802
Aug 30, 05:57 UTC 56 194.49.104.0/24 AS56373
Aug 30, 05:57 UTC 58 177.124.32.0/21 AS52861
Aug 30, 05:57 UTC 56 5.2.32.0/21 AS41560
Aug 30, 05:57 UTC 56 196.22.240.0/20 AS36874
Aug 30, 05:57 UTC 56 5.61.128.0/19 AS58243
Aug 30, 05:57 UTC 56 81.15.196.0/24 AS212987
Aug 30, 05:57 UTC 56 85.217.174.0/23 AS61098
Aug 30, 05:57 UTC 56 1.0.132.0/24 AS23969
Aug 30, 04:57 UTC 56 190.89.52.0/24 AS270356
Aug 30, 04:57 UTC 56 200.215.241.0/24 AS265279
Aug 30, 04:57 UTC 56 190.115.84.0/24 AS270431
Aug 30, 04:57 UTC 56 200.215.242.0/24 AS265279
Aug 30, 04:57 UTC 58 206.248.247.0/24 AS7795
Aug 30, 04:57 UTC 56 190.89.55.0/24 AS270356
Aug 30, 04:57 UTC 56 190.115.85.0/24 AS270431
Aug 30, 04:57 UTC 56 190.89.53.0/24 AS270356
Aug 30, 04:57 UTC 56 160.238.196.0/22 AS266546
Aug 30, 04:57 UTC 56 45.188.106.0/24 AS269512
Aug 30, 04:57 UTC 56 45.188.107.0/24 AS269512
Aug 30, 04:57 UTC 58 66.207.64.0/24 AS7795
Aug 30, 04:57 UTC 56 200.215.243.0/24 AS265279
Aug 30, 04:57 UTC 58 216.98.68.0/22 AS64512
Aug 30, 04:57 UTC 56 5.172.190.0/23 AS207012
Aug 30, 04:57 UTC 56 190.89.54.0/24 AS270356
Aug 30, 03:57 UTC 56 195.85.243.0/24 AS29223
Aug 30, 03:57 UTC 56 195.182.52.0/24 AS47322
Aug 30, 03:57 UTC 56 103.206.68.0/22 AS23673
Aug 30, 03:57 UTC 56 131.255.172.0/23 AS262491
Aug 30, 03:57 UTC 56 168.90.180.0/23 AS262491
Aug 30, 03:57 UTC 56 193.110.98.0/23 AS24918
Aug 30, 03:57 UTC 56 195.136.123.0/24 AS213530

Frequently Asked Questions

What is a BGP AS-path anomaly?

An AS-path anomaly is an unusual or implausible sequence of Autonomous Systems in a route advertisement whose unique-AS-path length (prepends collapsed) deviates sharply from the recent 36-hour median for that prefix — an unexpected transit AS, a loop, or a sudden detour. It can reveal a route leak or a path-prepending mistake.

Where does this data come from?

Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.

How often is the AS-path anomaly feed updated?

The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-08-30 06:15 UTC.

How do I subscribe to AS-path anomaly events?

Subscribe to the Atom feed at /pulse/bgp/aspath.atom or poll the JSON endpoint at /api/pulse/bgp/aspath.

Share