Pulse — AS-path anomaly
Unique-AS-path lengths (prepends collapsed) that deviate sharply from the recent 36-hour median for that prefix.
What is AS-path anomaly?
An AS-path anomaly is an unusual or implausible sequence of Autonomous Systems in a route advertisement whose unique-AS-path length (prepends collapsed) deviates sharply from the recent 36-hour median for that prefix — an unexpected transit AS, a loop, or a sudden detour. It can reveal a route leak or a path-prepending mistake.
Geographic distribution
Flagged events
Showing 200 most recent of 840 · last 24h| When | Severity | Prefix | AS |
|---|---|---|---|
| Aug 29, 19:56 UTC | 56 | 177.38.43.0/24 | AS52941 |
| Aug 29, 19:56 UTC | 58 | 148.206.52.0/24 | AS3596 |
| Aug 29, 19:56 UTC | 56 | 31.132.64.0/21 | AS56945 |
| Aug 29, 19:56 UTC | 58 | 148.206.57.0/24 | AS3596 |
| Aug 29, 19:56 UTC | 56 | 185.151.74.0/24 | AS47322 |
| Aug 29, 19:56 UTC | 56 | 195.238.245.0/24 | AS34730 |
| Aug 29, 19:56 UTC | 58 | 148.206.46.0/24 | AS3596 |
| Aug 29, 19:56 UTC | 56 | 82.177.201.0/24 | AS42246 |
| Aug 29, 19:56 UTC | 56 | 82.177.202.0/23 | AS206442 |
| Aug 29, 19:56 UTC | 56 | 41.190.86.0/23 | AS37026 |
| Aug 29, 19:56 UTC | 56 | 45.130.209.0/24 | AS34903 |
| Aug 29, 19:56 UTC | 58 | 148.206.62.0/24 | AS3596 |
| Aug 29, 19:56 UTC | 56 | 164.160.46.0/23 | AS328032 |
| Aug 29, 19:56 UTC | 58 | 148.206.43.0/24 | AS3596 |
| Aug 29, 19:56 UTC | 58 | 148.206.45.0/24 | AS3596 |
| Aug 29, 19:56 UTC | 56 | 177.38.45.0/24 | AS52941 |
| Aug 29, 19:56 UTC | 56 | 88.220.88.0/24 | AS215652 |
| Aug 29, 19:56 UTC | 56 | 185.202.124.0/24 | AS198595 |
| Aug 29, 19:56 UTC | 56 | 193.200.216.0/24 | AS43062 |
| Aug 29, 19:56 UTC | 58 | 148.206.61.0/24 | AS3596 |
| Aug 29, 19:56 UTC | 56 | 88.220.51.0/24 | AS209296 |
| Aug 29, 19:56 UTC | 56 | 101.53.254.0/24 | AS9541 |
| Aug 29, 19:56 UTC | 58 | 148.206.40.0/24 | AS3596 |
| Aug 29, 19:56 UTC | 56 | 91.217.228.0/24 | AS24732 |
| Aug 29, 19:56 UTC | 56 | 193.16.107.0/24 | AS31528 |
| Aug 29, 19:56 UTC | 56 | 78.41.24.0/21 | AS48022 |
| Aug 29, 19:56 UTC | 56 | 193.105.20.0/24 | AS50423 |
| Aug 29, 19:56 UTC | 56 | 160.20.24.0/22 | AS328032 |
| Aug 29, 19:56 UTC | 56 | 88.220.90.0/24 | AS212305 |
| Aug 29, 19:56 UTC | 56 | 193.28.0.0/24 | AS30730 |
| Aug 29, 19:56 UTC | 56 | 91.216.202.0/24 | AS197135 |
| Aug 29, 19:56 UTC | 56 | 193.108.177.0/24 | AS47322 |
| Aug 29, 19:56 UTC | 56 | 82.177.30.0/23 | AS199260 |
| Aug 29, 19:56 UTC | 56 | 82.177.128.0/24 | AS206093 |
| Aug 29, 19:56 UTC | 56 | 195.182.20.0/24 | AS58288 |
| Aug 29, 19:56 UTC | 56 | 88.220.84.0/24 | AS204301 |
| Aug 29, 19:56 UTC | 56 | 91.209.153.0/24 | AS41253 |
| Aug 29, 19:56 UTC | 56 | 145.237.4.0/24 | AS34339 |
| Aug 29, 19:56 UTC | 56 | 88.220.82.0/23 | AS201904 |
| Aug 29, 19:56 UTC | 56 | 185.255.252.0/22 | AS199390 |
| Aug 29, 19:56 UTC | 58 | 148.206.51.0/24 | AS3596 |
| Aug 29, 19:56 UTC | 58 | 148.206.54.0/24 | AS3596 |
| Aug 29, 19:56 UTC | 56 | 195.234.164.0/24 | AS204953 |
| Aug 29, 19:56 UTC | 56 | 91.224.144.0/23 | AS56752 |
| Aug 29, 19:56 UTC | 56 | 177.38.46.0/24 | AS52941 |
| Aug 29, 19:56 UTC | 62 | 181.232.170.0/23 | AS271352 |
| Aug 29, 19:56 UTC | 58 | 148.206.38.0/24 | AS3596 |
| Aug 29, 19:56 UTC | 56 | 145.237.0.0/16 | AS34339 |
| Aug 29, 19:56 UTC | 56 | 195.136.79.0/24 | AS39437 |
| Aug 29, 19:56 UTC | 56 | 89.238.0.0/18 | AS41356 |
| Aug 29, 19:56 UTC | 56 | 194.49.104.0/24 | AS56373 |
| Aug 29, 19:56 UTC | 56 | 81.15.237.0/24 | AS203279 |
| Aug 29, 19:56 UTC | 56 | 217.79.144.0/23 | AS42923 |
| Aug 29, 19:56 UTC | 56 | 92.63.32.0/20 | AS49633 |
| Aug 29, 19:56 UTC | 58 | 148.206.37.0/24 | AS3596 |
| Aug 29, 19:56 UTC | 56 | 88.199.162.0/24 | AS42923 |
| Aug 29, 19:56 UTC | 56 | 91.198.194.0/24 | AS43867 |
| Aug 29, 19:56 UTC | 56 | 193.178.132.0/24 | AS29536 |
| Aug 29, 19:56 UTC | 56 | 157.25.57.0/24 | AS206770 |
| Aug 29, 19:56 UTC | 56 | 83.168.93.0/24 | AS2115 |
| Aug 29, 19:56 UTC | 56 | 82.177.36.0/24 | AS44284 |
| Aug 29, 19:56 UTC | 56 | 185.18.132.0/22 | AS199390 |
| Aug 29, 19:56 UTC | 58 | 148.206.32.0/24 | AS3596 |
| Aug 29, 19:56 UTC | 56 | 91.236.57.0/24 | AS198595 |
| Aug 29, 19:56 UTC | 56 | 192.68.51.0/24 | AS198743 |
| Aug 29, 19:56 UTC | 56 | 145.237.0.0/17 | AS34339 |
| Aug 29, 19:56 UTC | 58 | 148.206.34.0/24 | AS3596 |
| Aug 29, 19:56 UTC | 58 | 148.206.58.0/24 | AS3596 |
| Aug 29, 19:56 UTC | 56 | 158.66.1.0/24 | AS21111 |
| Aug 29, 19:56 UTC | 56 | 45.169.215.0/24 | AS52941 |
| Aug 29, 19:56 UTC | 56 | 91.235.16.0/22 | AS204295 |
| Aug 29, 19:56 UTC | 56 | 91.223.68.0/24 | AS2115 |
| Aug 29, 19:56 UTC | 56 | 81.15.196.0/24 | AS212987 |
| Aug 29, 19:56 UTC | 56 | 185.41.94.0/23 | AS199953 |
| Aug 29, 19:56 UTC | 58 | 148.206.42.0/24 | AS3596 |
| Aug 29, 19:56 UTC | 56 | 45.130.208.0/22 | AS34903 |
| Aug 29, 19:56 UTC | 56 | 192.162.44.0/22 | AS197682 |
| Aug 29, 19:56 UTC | 56 | 195.182.35.0/24 | AS47290 |
| Aug 29, 19:56 UTC | 58 | 148.206.49.0/24 | AS3596 |
| Aug 29, 19:56 UTC | 56 | 196.41.96.0/19 | AS36874 |
| Aug 29, 19:56 UTC | 56 | 196.22.240.0/20 | AS36874 |
| Aug 29, 19:56 UTC | 56 | 145.237.221.0/24 | AS34339 |
| Aug 29, 19:56 UTC | 56 | 91.231.92.0/24 | AS47672 |
| Aug 29, 19:56 UTC | 56 | 158.66.4.0/24 | AS21111 |
| Aug 29, 19:56 UTC | 56 | 195.136.2.0/23 | AS51393 |
| Aug 29, 19:56 UTC | 56 | 45.130.208.0/24 | AS34903 |
| Aug 29, 19:56 UTC | 56 | 85.198.248.0/22 | AS208556 |
| Aug 29, 19:56 UTC | 56 | 145.237.224.0/19 | AS34339 |
| Aug 29, 19:56 UTC | 56 | 158.66.5.0/24 | AS21111 |
| Aug 29, 19:56 UTC | 56 | 105.233.0.0/16 | AS36874 |
| Aug 29, 19:56 UTC | 56 | 145.237.222.0/24 | AS34339 |
| Aug 29, 19:56 UTC | 56 | 80.241.128.0/21 | AS16296 |
| Aug 29, 19:56 UTC | 56 | 88.220.71.0/24 | AS199694 |
| Aug 29, 19:56 UTC | 56 | 164.160.44.0/23 | AS328032 |
| Aug 29, 19:56 UTC | 56 | 88.220.164.0/24 | AS209388 |
| Aug 29, 19:56 UTC | 56 | 46.148.132.0/22 | AS44056 |
| Aug 29, 19:56 UTC | 56 | 45.169.214.0/24 | AS52941 |
| Aug 29, 19:56 UTC | 56 | 185.202.126.0/24 | AS198595 |
| Aug 29, 19:56 UTC | 56 | 194.49.106.0/24 | AS56373 |
| Aug 29, 19:56 UTC | 58 | 148.206.47.0/24 | AS3596 |
| Aug 29, 19:56 UTC | 56 | 41.217.205.0/24 | AS37125 |
| Aug 29, 19:56 UTC | 56 | 45.130.210.0/24 | AS34903 |
| Aug 29, 19:56 UTC | 56 | 194.41.12.0/22 | AS25495 |
| Aug 29, 19:56 UTC | 56 | 82.177.56.0/24 | AS214802 |
| Aug 29, 19:56 UTC | 58 | 148.206.50.0/24 | AS3596 |
| Aug 29, 19:56 UTC | 56 | 81.15.217.0/24 | AS205990 |
| Aug 29, 19:56 UTC | 56 | 85.190.245.0/24 | AS41455 |
| Aug 29, 19:56 UTC | 56 | 195.136.108.0/24 | AS215903 |
| Aug 29, 19:56 UTC | 58 | 148.206.39.0/24 | AS3596 |
| Aug 29, 19:56 UTC | 56 | 185.13.144.0/22 | AS49633 |
| Aug 29, 19:56 UTC | 58 | 148.206.55.0/24 | AS3596 |
| Aug 29, 19:56 UTC | 56 | 177.38.44.0/24 | AS52941 |
| Aug 29, 19:56 UTC | 56 | 185.96.8.0/22 | AS200792 |
| Aug 29, 19:56 UTC | 58 | 132.248.81.0/24 | AS278 |
| Aug 29, 19:56 UTC | 56 | 145.237.160.0/19 | AS34339 |
| Aug 29, 19:56 UTC | 56 | 185.151.75.0/24 | AS47322 |
| Aug 29, 19:56 UTC | 56 | 81.15.145.0/24 | AS205034 |
| Aug 29, 19:56 UTC | 56 | 145.237.128.0/17 | AS34339 |
| Aug 29, 19:56 UTC | 56 | 185.106.168.0/22 | AS49633 |
| Aug 29, 19:56 UTC | 56 | 91.239.205.0/24 | AS198835 |
| Aug 29, 19:56 UTC | 56 | 88.220.72.0/24 | AS199823 |
| Aug 29, 19:56 UTC | 58 | 148.206.53.0/24 | AS3596 |
| Aug 29, 19:56 UTC | 56 | 46.231.152.0/21 | AS34999 |
| Aug 29, 19:56 UTC | 56 | 81.15.191.0/24 | AS204301 |
| Aug 29, 19:56 UTC | 56 | 88.220.55.0/24 | AS213530 |
| Aug 29, 19:56 UTC | 58 | 148.206.60.0/24 | AS3596 |
| Aug 29, 19:56 UTC | 56 | 195.136.176.0/22 | AS199390 |
| Aug 29, 19:56 UTC | 58 | 148.206.41.0/24 | AS3596 |
| Aug 29, 19:56 UTC | 58 | 148.206.48.0/24 | AS3596 |
| Aug 29, 19:56 UTC | 56 | 185.32.48.0/24 | AS200244 |
| Aug 29, 19:56 UTC | 56 | 158.66.2.0/24 | AS21111 |
| Aug 29, 19:56 UTC | 56 | 185.202.127.0/24 | AS198595 |
| Aug 29, 19:56 UTC | 56 | 5.172.190.0/23 | AS207012 |
| Aug 29, 19:56 UTC | 56 | 82.177.204.0/24 | AS50625 |
| Aug 29, 19:56 UTC | 56 | 158.66.0.0/16 | AS21111 |
| Aug 29, 19:56 UTC | 56 | 195.182.52.0/24 | AS47322 |
| Aug 29, 19:56 UTC | 56 | 195.182.9.0/24 | AS39171 |
| Aug 29, 19:56 UTC | 58 | 148.206.36.0/24 | AS3596 |
| Aug 29, 19:56 UTC | 58 | 148.206.44.0/24 | AS3596 |
| Aug 29, 19:56 UTC | 56 | 177.38.47.0/24 | AS52941 |
| Aug 29, 19:56 UTC | 56 | 145.237.192.0/19 | AS34339 |
| Aug 29, 19:56 UTC | 56 | 82.177.190.0/24 | AS197903 |
| Aug 29, 19:56 UTC | 58 | 148.206.56.0/24 | AS3596 |
| Aug 29, 19:56 UTC | 56 | 185.41.92.0/24 | AS199953 |
| Aug 29, 19:56 UTC | 56 | 194.165.54.0/24 | AS39243 |
| Aug 29, 19:56 UTC | 56 | 194.0.199.0/24 | AS42966 |
| Aug 29, 19:56 UTC | 56 | 193.43.12.0/23 | AS204295 |
| Aug 29, 19:56 UTC | 56 | 88.220.138.0/24 | AS210587 |
| Aug 29, 19:56 UTC | 56 | 158.66.6.0/24 | AS21111 |
| Aug 29, 19:56 UTC | 56 | 41.177.0.0/16 | AS36874 |
| Aug 29, 19:56 UTC | 56 | 145.237.3.0/24 | AS34339 |
| Aug 29, 19:56 UTC | 56 | 91.218.196.0/22 | AS51393 |
| Aug 29, 19:56 UTC | 56 | 81.15.155.0/24 | AS211388 |
| Aug 29, 19:56 UTC | 56 | 217.79.146.0/23 | AS42923 |
| Aug 29, 19:56 UTC | 56 | 82.177.195.0/24 | AS197142 |
| Aug 29, 19:56 UTC | 58 | 148.206.59.0/24 | AS3596 |
| Aug 29, 19:56 UTC | 56 | 177.38.42.0/24 | AS52941 |
| Aug 29, 19:56 UTC | 56 | 194.50.110.0/24 | AS39661 |
| Aug 29, 18:56 UTC | 56 | 188.172.244.0/24 | AS42473 |
| Aug 29, 18:56 UTC | 56 | 185.126.102.0/24 | AS61430 |
| Aug 29, 18:56 UTC | 56 | 91.197.148.0/22 | AS30975 |
| Aug 29, 18:56 UTC | 56 | 83.145.128.0/18 | AS30975 |
| Aug 29, 18:56 UTC | 56 | 91.213.252.0/24 | AS61430 |
| Aug 29, 18:56 UTC | 56 | 80.78.133.0/24 | AS39083 |
| Aug 29, 18:56 UTC | 56 | 185.237.210.0/24 | AS61430 |
| Aug 29, 18:56 UTC | 56 | 45.161.220.0/23 | AS268499 |
| Aug 29, 18:56 UTC | 56 | 213.227.180.0/24 | AS42473 |
| Aug 29, 18:56 UTC | 56 | 45.164.202.0/23 | AS272174 |
| Aug 29, 18:56 UTC | 56 | 185.126.100.0/24 | AS61430 |
| Aug 29, 18:56 UTC | 56 | 91.210.131.0/24 | AS44279 |
| Aug 29, 18:56 UTC | 58 | 45.129.95.0/24 | AS207960 |
| Aug 29, 18:56 UTC | 56 | 91.228.190.0/23 | AS61430 |
| Aug 29, 18:56 UTC | 56 | 44.31.126.0/24 | AS203478 |
| Aug 29, 18:56 UTC | 56 | 185.126.103.0/24 | AS61430 |
| Aug 29, 18:56 UTC | 56 | 185.126.101.0/24 | AS61430 |
| Aug 29, 18:56 UTC | 56 | 176.119.217.0/24 | AS215385 |
| Aug 29, 18:56 UTC | 56 | 45.161.222.0/23 | AS268499 |
| Aug 29, 18:56 UTC | 56 | 80.78.134.0/24 | AS50801 |
| Aug 29, 18:56 UTC | 56 | 144.208.220.0/24 | AS42473 |
| Aug 29, 18:56 UTC | 56 | 80.78.135.0/24 | AS50801 |
| Aug 29, 18:56 UTC | 56 | 194.35.236.0/23 | AS49007 |
| Aug 29, 18:56 UTC | 56 | 91.231.178.0/24 | AS52142 |
| Aug 29, 18:56 UTC | 56 | 5.231.122.0/24 | AS200275 |
| Aug 29, 18:56 UTC | 56 | 195.69.209.0/24 | AS25070 |
| Aug 29, 18:56 UTC | 56 | 185.237.211.0/24 | AS61430 |
| Aug 29, 18:56 UTC | 56 | 91.210.130.0/24 | AS44279 |
| Aug 29, 17:57 UTC | 56 | 154.120.72.0/23 | AS37340 |
| Aug 29, 17:57 UTC | 58 | 190.11.210.0/23 | AS270652 |
| Aug 29, 17:57 UTC | 56 | 41.217.16.0/23 | AS37340 |
| Aug 29, 17:57 UTC | 56 | 213.199.213.0/24 | AS25070 |
| Aug 29, 17:57 UTC | 58 | 170.231.208.0/22 | AS61621 |
| Aug 29, 17:57 UTC | 58 | 190.11.210.0/24 | AS270652 |
| Aug 29, 17:57 UTC | 56 | 193.238.64.0/22 | AS31412 |
| Aug 29, 17:57 UTC | 56 | 102.164.37.0/24 | AS37125 |
| Aug 29, 17:57 UTC | 56 | 185.247.252.0/24 | AS200369 |
| Aug 29, 17:57 UTC | 58 | 94.232.91.0/24 | AS48365 |
| Aug 29, 17:57 UTC | 56 | 62.212.160.0/19 | AS29081 |
| Aug 29, 17:57 UTC | 56 | 195.167.149.0/24 | AS206838 |
| Aug 29, 17:57 UTC | 56 | 195.167.148.0/24 | AS206838 |
| Aug 29, 17:57 UTC | 56 | 195.136.121.0/24 | AS204412 |
Frequently Asked Questions
What is a BGP AS-path anomaly?
An AS-path anomaly is an unusual or implausible sequence of Autonomous Systems in a route advertisement whose unique-AS-path length (prepends collapsed) deviates sharply from the recent 36-hour median for that prefix — an unexpected transit AS, a loop, or a sudden detour. It can reveal a route leak or a path-prepending mistake.
Where does this data come from?
Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.
How often is the AS-path anomaly feed updated?
The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-08-29 20:45 UTC.
How do I subscribe to AS-path anomaly events?
Subscribe to the Atom feed at /pulse/bgp/aspath.atom or poll the JSON endpoint at /api/pulse/bgp/aspath.