Pulse — AS-path anomaly
Unique-AS-path lengths (prepends collapsed) that deviate sharply from the recent 36-hour median for that prefix.
What is AS-path anomaly?
An AS-path anomaly is an unusual or implausible sequence of Autonomous Systems in a route advertisement whose unique-AS-path length (prepends collapsed) deviates sharply from the recent 36-hour median for that prefix — an unexpected transit AS, a loop, or a sudden detour. It can reveal a route leak or a path-prepending mistake.
Geographic distribution
Flagged events
Showing 200 most recent of 1,134 · last 24h| When | Severity | Prefix | AS |
|---|---|---|---|
| Oct 17, 08:16 UTC | 56 | 80.254.17.0/24 | AS39101 |
| Oct 17, 08:16 UTC | 56 | 147.185.221.0/24 | AS400519 |
| Oct 17, 08:16 UTC | 56 | 95.170.146.0/24 | AS49987 |
| Oct 17, 08:16 UTC | 58 | 194.226.97.0/24 | AS197695 |
| Oct 17, 08:16 UTC | 56 | 204.197.171.0/24 | AS400226 |
| Oct 17, 08:16 UTC | 56 | 92.240.194.0/23 | AS39735 |
| Oct 17, 08:16 UTC | 56 | 118.94.85.0/24 | AS13150 |
| Oct 17, 08:16 UTC | 56 | 185.149.127.0/24 | AS202835 |
| Oct 17, 08:16 UTC | 56 | 79.175.34.0/24 | AS12418 |
| Oct 17, 08:16 UTC | 56 | 198.22.204.0/23 | AS400519 |
| Oct 17, 08:16 UTC | 56 | 194.67.116.0/24 | AS197695 |
| Oct 17, 08:16 UTC | 56 | 209.25.140.0/22 | AS400519 |
| Oct 17, 08:16 UTC | 56 | 195.191.226.0/23 | AS41775 |
| Oct 17, 08:16 UTC | 56 | 94.138.147.0/24 | AS199317 |
| Oct 17, 08:16 UTC | 56 | 118.94.91.0/24 | AS13150 |
| Oct 17, 08:16 UTC | 56 | 174.35.49.0/24 | AS54994 |
| Oct 17, 08:16 UTC | 56 | 38.19.48.0/24 | AS274697 |
| Oct 17, 08:16 UTC | 56 | 77.235.202.0/24 | AS12418 |
| Oct 17, 08:16 UTC | 56 | 45.183.188.0/22 | AS269298 |
| Oct 17, 08:16 UTC | 56 | 81.89.80.0/21 | AS39789 |
| Oct 17, 08:16 UTC | 60 | 177.8.157.0/24 | AS263286 |
| Oct 17, 08:16 UTC | 58 | 193.151.55.0/24 | AS207990 |
| Oct 17, 08:16 UTC | 58 | 77.81.93.0/24 | AS207990 |
| Oct 17, 08:16 UTC | 58 | 113.19.96.0/22 | AS17639 |
| Oct 17, 08:16 UTC | 58 | 45.113.115.0/24 | AS63888 |
| Oct 17, 08:16 UTC | 56 | 168.222.192.0/24 | AS197695 |
| Oct 17, 08:16 UTC | 56 | 223.31.156.0/24 | AS9583 |
| Oct 17, 08:16 UTC | 58 | 193.28.237.0/24 | AS207990 |
| Oct 17, 08:16 UTC | 56 | 200.219.154.0/24 | AS11644 |
| Oct 17, 08:16 UTC | 58 | 195.3.139.0/24 | AS207990 |
| Oct 17, 08:16 UTC | 56 | 95.80.117.0/24 | AS12418 |
| Oct 17, 08:16 UTC | 56 | 195.24.71.0/24 | AS197695 |
| Oct 17, 08:16 UTC | 56 | 108.59.170.0/23 | AS31898 |
| Oct 17, 08:16 UTC | 56 | 95.80.64.0/24 | AS12418 |
| Oct 17, 08:16 UTC | 58 | 45.112.24.0/24 | AS63888 |
| Oct 17, 08:16 UTC | 56 | 124.6.54.0/24 | AS24482 |
| Oct 17, 08:16 UTC | 60 | 91.231.146.0/24 | AS197865 |
| Oct 17, 08:16 UTC | 56 | 89.108.66.0/24 | AS197695 |
| Oct 17, 08:16 UTC | 56 | 130.49.151.0/24 | AS197695 |
| Oct 17, 08:16 UTC | 58 | 194.226.165.0/24 | AS197695 |
| Oct 17, 08:16 UTC | 62 | 204.157.236.0/24 | AS52511 |
| Oct 17, 08:16 UTC | 60 | 177.8.156.0/24 | AS263286 |
| Oct 17, 08:16 UTC | 56 | 77.235.222.0/24 | AS12418 |
| Oct 17, 08:16 UTC | 56 | 195.95.218.0/24 | AS57274 |
| Oct 17, 08:16 UTC | 56 | 124.6.55.0/24 | AS24482 |
| Oct 17, 08:16 UTC | 56 | 91.240.111.0/24 | AS58301 |
| Oct 17, 08:16 UTC | 58 | 95.175.86.0/24 | AS207990 |
| Oct 17, 08:16 UTC | 56 | 185.14.5.0/24 | AS42482 |
| Oct 17, 08:16 UTC | 56 | 213.221.14.0/24 | AS57580 |
| Oct 17, 08:16 UTC | 56 | 31.44.248.0/23 | AS42971 |
| Oct 17, 08:16 UTC | 56 | 103.210.226.0/24 | AS151358 |
| Oct 17, 08:16 UTC | 56 | 95.80.91.0/24 | AS12418 |
| Oct 17, 08:16 UTC | 56 | 95.128.136.0/21 | AS44572 |
| Oct 17, 08:16 UTC | 56 | 185.14.6.0/23 | AS42482 |
| Oct 17, 08:16 UTC | 58 | 95.175.92.0/24 | AS207990 |
| Oct 17, 08:16 UTC | 58 | 95.175.88.0/24 | AS207990 |
| Oct 17, 08:16 UTC | 56 | 206.237.43.0/24 | AS151358 |
| Oct 17, 08:16 UTC | 58 | 186.219.255.0/24 | AS262997 |
| Oct 17, 08:16 UTC | 56 | 185.53.104.0/23 | AS203714 |
| Oct 17, 08:16 UTC | 56 | 80.254.16.0/20 | AS39101 |
| Oct 17, 08:16 UTC | 56 | 80.254.23.0/24 | AS39101 |
| Oct 17, 08:16 UTC | 56 | 124.6.54.0/23 | AS24482 |
| Oct 17, 08:16 UTC | 56 | 212.102.98.0/24 | AS47254 |
| Oct 17, 08:16 UTC | 56 | 69.9.176.0/20 | AS400519 |
| Oct 17, 08:16 UTC | 58 | 185.212.29.0/24 | AS57212 |
| Oct 17, 08:16 UTC | 58 | 78.31.160.0/23 | AS199136 |
| Oct 17, 08:16 UTC | 56 | 23.128.248.0/24 | AS400226 |
| Oct 17, 08:16 UTC | 58 | 194.226.166.0/24 | AS197695 |
| Oct 17, 08:16 UTC | 58 | 103.157.42.0/24 | AS131642 |
| Oct 17, 08:16 UTC | 56 | 62.213.100.0/24 | AS197695 |
| Oct 17, 08:16 UTC | 56 | 58.97.162.0/24 | AS58884 |
| Oct 17, 08:16 UTC | 58 | 103.194.151.0/24 | AS63888 |
| Oct 17, 08:16 UTC | 56 | 81.89.80.0/24 | AS39789 |
| Oct 17, 08:16 UTC | 56 | 80.254.16.0/21 | AS39101 |
| Oct 17, 08:16 UTC | 56 | 172.98.52.0/24 | AS399899 |
| Oct 17, 08:16 UTC | 56 | 89.185.92.0/22 | AS39735 |
| Oct 17, 08:16 UTC | 56 | 185.250.128.0/23 | AS39101 |
| Oct 17, 08:16 UTC | 56 | 185.216.100.0/22 | AS50374 |
| Oct 17, 08:16 UTC | 56 | 93.189.148.0/24 | AS60231 |
| Oct 17, 08:16 UTC | 56 | 185.242.116.0/22 | AS42971 |
| Oct 17, 08:16 UTC | 56 | 185.250.130.0/23 | AS39101 |
| Oct 17, 07:16 UTC | 56 | 202.62.71.0/24 | AS17483 |
| Oct 17, 07:16 UTC | 56 | 186.211.235.0/24 | AS14840 |
| Oct 17, 07:16 UTC | 56 | 45.123.27.0/24 | AS17483 |
| Oct 17, 07:16 UTC | 56 | 202.62.67.0/24 | AS17483 |
| Oct 17, 07:16 UTC | 56 | 45.123.24.0/24 | AS17483 |
| Oct 17, 07:16 UTC | 56 | 38.87.169.0/24 | AS400302 |
| Oct 17, 07:16 UTC | 56 | 202.62.87.0/24 | AS17483 |
| Oct 17, 07:16 UTC | 56 | 186.211.232.0/22 | AS14840 |
| Oct 17, 07:16 UTC | 56 | 103.219.169.0/24 | AS396356 |
| Oct 17, 07:16 UTC | 56 | 103.171.200.0/24 | AS137127 |
| Oct 17, 07:16 UTC | 58 | 179.127.72.0/24 | AS263283 |
| Oct 17, 07:16 UTC | 56 | 202.62.88.0/24 | AS17483 |
| Oct 17, 07:16 UTC | 56 | 45.139.41.0/24 | AS208401 |
| Oct 17, 07:16 UTC | 56 | 202.62.75.0/24 | AS17483 |
| Oct 17, 07:16 UTC | 56 | 202.62.94.0/24 | AS17483 |
| Oct 17, 07:16 UTC | 56 | 202.62.86.0/24 | AS17483 |
| Oct 17, 07:16 UTC | 56 | 202.62.68.0/24 | AS17483 |
| Oct 17, 07:16 UTC | 56 | 202.62.66.0/24 | AS17483 |
| Oct 17, 07:16 UTC | 56 | 103.5.16.0/24 | AS17483 |
| Oct 17, 07:16 UTC | 56 | 202.62.81.0/24 | AS17483 |
| Oct 17, 07:16 UTC | 56 | 195.191.226.0/24 | AS41775 |
| Oct 17, 07:16 UTC | 56 | 45.123.25.0/24 | AS17483 |
| Oct 17, 07:16 UTC | 56 | 202.62.90.0/24 | AS17483 |
| Oct 17, 07:16 UTC | 56 | 202.62.69.0/24 | AS17483 |
| Oct 17, 07:16 UTC | 56 | 202.62.64.0/24 | AS17483 |
| Oct 17, 07:16 UTC | 56 | 202.62.93.0/24 | AS17483 |
| Oct 17, 07:16 UTC | 58 | 45.71.73.0/24 | AS267597 |
| Oct 17, 07:16 UTC | 56 | 202.62.65.0/24 | AS17483 |
| Oct 17, 07:16 UTC | 56 | 202.62.84.0/24 | AS17483 |
| Oct 17, 07:16 UTC | 56 | 202.62.72.0/24 | AS17483 |
| Oct 17, 07:16 UTC | 56 | 202.62.73.0/24 | AS17483 |
| Oct 17, 07:16 UTC | 58 | 66.102.124.0/24 | AS150671 |
| Oct 17, 07:16 UTC | 56 | 202.62.85.0/24 | AS17483 |
| Oct 17, 07:16 UTC | 56 | 202.62.89.0/24 | AS17483 |
| Oct 17, 06:16 UTC | 56 | 203.189.140.0/24 | AS23673 |
| Oct 17, 06:16 UTC | 56 | 203.189.159.0/24 | AS23673 |
| Oct 17, 06:16 UTC | 56 | 203.189.135.0/24 | AS23673 |
| Oct 17, 05:16 UTC | 56 | 31.128.208.0/22 | AS48738 |
| Oct 17, 05:16 UTC | 56 | 95.26.234.0/24 | AS3216 |
| Oct 17, 05:16 UTC | 56 | 92.240.210.0/23 | AS39735 |
| Oct 17, 05:16 UTC | 56 | 89.188.250.0/24 | AS20533 |
| Oct 17, 05:16 UTC | 56 | 95.25.208.0/23 | AS3216 |
| Oct 17, 05:16 UTC | 56 | 95.25.206.0/23 | AS3216 |
| Oct 17, 05:16 UTC | 56 | 89.188.236.0/24 | AS20533 |
| Oct 17, 05:16 UTC | 56 | 31.128.194.0/23 | AS48738 |
| Oct 17, 05:16 UTC | 56 | 89.188.241.0/24 | AS20533 |
| Oct 17, 05:16 UTC | 56 | 95.30.19.0/24 | AS3216 |
| Oct 17, 05:16 UTC | 56 | 198.54.156.0/22 | AS3741 |
| Oct 17, 05:16 UTC | 56 | 41.133.192.0/18 | AS20011 |
| Oct 17, 05:16 UTC | 56 | 95.143.8.0/23 | AS215182 |
| Oct 17, 05:16 UTC | 56 | 95.131.229.0/24 | AS20533 |
| Oct 17, 05:16 UTC | 56 | 196.4.71.0/24 | AS3741 |
| Oct 17, 05:16 UTC | 56 | 89.38.164.0/24 | AS35168 |
| Oct 17, 05:16 UTC | 56 | 217.148.192.0/24 | AS20533 |
| Oct 17, 05:16 UTC | 56 | 89.188.240.0/24 | AS20533 |
| Oct 17, 05:16 UTC | 56 | 31.128.204.0/22 | AS48738 |
| Oct 17, 05:16 UTC | 56 | 217.148.201.0/24 | AS20533 |
| Oct 17, 05:16 UTC | 56 | 95.26.168.0/23 | AS3216 |
| Oct 17, 05:16 UTC | 56 | 196.13.213.0/24 | AS3741 |
| Oct 17, 05:16 UTC | 56 | 217.148.207.0/24 | AS20533 |
| Oct 17, 05:16 UTC | 56 | 89.188.230.0/24 | AS20533 |
| Oct 17, 05:16 UTC | 56 | 95.25.160.0/22 | AS3216 |
| Oct 17, 05:16 UTC | 56 | 31.128.196.0/22 | AS48738 |
| Oct 17, 05:16 UTC | 56 | 95.26.231.0/24 | AS3216 |
| Oct 17, 05:16 UTC | 56 | 102.220.36.0/22 | AS328475 |
| Oct 17, 05:16 UTC | 56 | 95.25.164.0/22 | AS3216 |
| Oct 17, 05:16 UTC | 56 | 102.207.68.0/22 | AS328475 |
| Oct 17, 05:16 UTC | 58 | 45.228.236.0/22 | AS267125 |
| Oct 17, 05:16 UTC | 56 | 217.148.205.0/24 | AS20533 |
| Oct 17, 05:16 UTC | 56 | 89.188.224.0/24 | AS20533 |
| Oct 17, 05:16 UTC | 56 | 41.135.0.0/20 | AS20011 |
| Oct 17, 05:16 UTC | 56 | 89.188.228.0/24 | AS20533 |
| Oct 17, 05:16 UTC | 56 | 95.26.164.0/23 | AS3216 |
| Oct 17, 05:16 UTC | 56 | 89.188.231.0/24 | AS20533 |
| Oct 17, 05:16 UTC | 56 | 95.26.232.0/24 | AS3216 |
| Oct 17, 05:16 UTC | 56 | 89.188.254.0/24 | AS20533 |
| Oct 17, 05:16 UTC | 56 | 89.188.238.0/24 | AS20533 |
| Oct 17, 05:16 UTC | 56 | 95.26.170.0/23 | AS3216 |
| Oct 17, 05:16 UTC | 58 | 170.84.24.0/23 | AS265029 |
| Oct 17, 05:16 UTC | 56 | 198.54.163.0/24 | AS3741 |
| Oct 17, 05:16 UTC | 56 | 81.28.244.0/24 | AS51538 |
| Oct 17, 05:16 UTC | 56 | 31.128.220.0/22 | AS48738 |
| Oct 17, 05:16 UTC | 56 | 217.148.200.0/24 | AS20533 |
| Oct 17, 05:16 UTC | 56 | 95.26.166.0/23 | AS3216 |
| Oct 17, 05:16 UTC | 56 | 89.188.245.0/24 | AS20533 |
| Oct 17, 05:16 UTC | 56 | 95.26.233.0/24 | AS3216 |
| Oct 17, 05:16 UTC | 56 | 89.188.229.0/24 | AS20533 |
| Oct 17, 05:16 UTC | 56 | 95.25.214.0/23 | AS3216 |
| Oct 17, 05:16 UTC | 56 | 196.3.163.0/24 | AS3741 |
| Oct 17, 05:16 UTC | 56 | 89.188.255.0/24 | AS20533 |
| Oct 17, 05:16 UTC | 56 | 89.188.239.0/24 | AS20533 |
| Oct 17, 05:16 UTC | 56 | 196.10.104.0/24 | AS3741 |
| Oct 17, 05:16 UTC | 56 | 109.71.200.0/22 | AS3216 |
| Oct 17, 05:16 UTC | 56 | 95.131.226.0/24 | AS20533 |
| Oct 17, 05:16 UTC | 56 | 217.148.199.0/24 | AS20533 |
| Oct 17, 05:16 UTC | 56 | 217.148.202.0/24 | AS20533 |
| Oct 17, 05:16 UTC | 56 | 89.188.244.0/24 | AS20533 |
| Oct 17, 05:16 UTC | 56 | 95.25.204.0/23 | AS3216 |
| Oct 17, 05:16 UTC | 56 | 89.188.248.0/24 | AS20533 |
| Oct 17, 05:16 UTC | 56 | 95.26.160.0/23 | AS3216 |
| Oct 17, 05:16 UTC | 56 | 217.148.198.0/24 | AS20533 |
| Oct 17, 05:16 UTC | 56 | 217.148.192.0/20 | AS20533 |
| Oct 17, 05:16 UTC | 58 | 45.228.238.0/23 | AS267125 |
| Oct 17, 05:16 UTC | 56 | 89.188.251.0/24 | AS20533 |
| Oct 17, 05:16 UTC | 56 | 217.148.204.0/24 | AS20533 |
| Oct 17, 05:16 UTC | 56 | 95.25.210.0/23 | AS3216 |
| Oct 17, 05:16 UTC | 56 | 89.188.234.0/24 | AS20533 |
| Oct 17, 05:16 UTC | 56 | 217.148.203.0/24 | AS20533 |
| Oct 17, 05:16 UTC | 56 | 31.128.192.0/22 | AS48738 |
| Oct 17, 05:16 UTC | 56 | 46.8.54.0/23 | AS58238 |
| Oct 17, 05:16 UTC | 56 | 92.240.212.0/23 | AS39735 |
| Oct 17, 05:16 UTC | 56 | 192.96.133.0/24 | AS3741 |
| Oct 17, 05:16 UTC | 56 | 95.26.194.0/23 | AS3216 |
| Oct 17, 05:16 UTC | 56 | 217.148.206.0/24 | AS20533 |
| Oct 17, 05:16 UTC | 56 | 95.131.227.0/24 | AS20533 |
| Oct 17, 05:16 UTC | 56 | 93.157.174.0/24 | AS49403 |
| Oct 17, 05:16 UTC | 56 | 89.188.225.0/24 | AS20533 |
| Oct 17, 05:16 UTC | 56 | 196.4.184.0/22 | AS3741 |
| Oct 17, 05:16 UTC | 56 | 165.165.0.0/16 | AS5713 |
Frequently Asked Questions
What is a BGP AS-path anomaly?
An AS-path anomaly is an unusual or implausible sequence of Autonomous Systems in a route advertisement whose unique-AS-path length (prepends collapsed) deviates sharply from the recent 36-hour median for that prefix — an unexpected transit AS, a loop, or a sudden detour. It can reveal a route leak or a path-prepending mistake.
Where does this data come from?
Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.
How often is the AS-path anomaly feed updated?
The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-10-17 09:00 UTC.
How do I subscribe to AS-path anomaly events?
Subscribe to the Atom feed at /pulse/bgp/aspath.atom or poll the JSON endpoint at /api/pulse/bgp/aspath.