Pulse — AS-path anomaly
Unique-AS-path lengths (prepends collapsed) that deviate sharply from the recent 36-hour median for that prefix.
What is AS-path anomaly?
An AS-path anomaly is an unusual or implausible sequence of Autonomous Systems in a route advertisement whose unique-AS-path length (prepends collapsed) deviates sharply from the recent 36-hour median for that prefix — an unexpected transit AS, a loop, or a sudden detour. It can reveal a route leak or a path-prepending mistake.
Geographic distribution
Flagged events
Showing 200 most recent of 1,588 · last 24h| When | Severity | Prefix | AS |
|---|---|---|---|
| Oct 17, 02:17 UTC | 56 | 45.183.188.0/22 | AS269298 |
| Oct 17, 02:17 UTC | 58 | 177.53.198.0/24 | AS274729 |
| Oct 17, 02:17 UTC | 56 | 114.111.58.0/24 | AS54994 |
| Oct 17, 02:17 UTC | 56 | 211.43.149.0/24 | AS54994 |
| Oct 17, 02:17 UTC | 56 | 108.59.170.0/23 | AS31898 |
| Oct 17, 02:17 UTC | 56 | 119.31.254.0/24 | AS54994 |
| Oct 17, 01:17 UTC | 56 | 109.235.15.0/24 | AS9202 |
| Oct 17, 01:17 UTC | 56 | 192.144.65.0/24 | AS266178 |
| Oct 17, 01:17 UTC | 56 | 168.232.136.0/22 | AS264943 |
| Oct 17, 01:17 UTC | 56 | 119.82.129.0/24 | AS45903 |
| Oct 17, 01:17 UTC | 56 | 42.96.39.0/24 | AS45903 |
| Oct 17, 01:17 UTC | 56 | 167.250.60.0/22 | AS264943 |
| Oct 17, 01:17 UTC | 56 | 203.171.28.0/23 | AS45903 |
| Oct 17, 01:17 UTC | 56 | 179.43.54.0/24 | AS270872 |
| Oct 17, 01:17 UTC | 56 | 115.165.166.0/24 | AS45903 |
| Oct 17, 01:17 UTC | 56 | 170.231.200.0/22 | AS264943 |
| Oct 17, 01:17 UTC | 56 | 101.99.37.0/24 | AS45903 |
| Oct 17, 01:17 UTC | 56 | 45.142.89.0/24 | AS207123 |
| Oct 17, 01:17 UTC | 56 | 138.97.147.0/24 | AS266178 |
| Oct 17, 01:17 UTC | 56 | 203.205.7.0/24 | AS45903 |
| Oct 17, 01:17 UTC | 56 | 103.63.110.0/24 | AS45903 |
| Oct 17, 01:17 UTC | 56 | 203.205.47.0/24 | AS45903 |
| Oct 17, 01:17 UTC | 56 | 203.205.1.0/24 | AS45903 |
| Oct 17, 01:17 UTC | 56 | 162.4.9.0/24 | AS45903 |
| Oct 17, 01:17 UTC | 56 | 203.205.2.0/24 | AS45903 |
| Oct 17, 01:17 UTC | 56 | 192.162.140.0/22 | AS56610 |
| Oct 17, 01:17 UTC | 56 | 119.82.135.0/24 | AS45903 |
| Oct 17, 01:17 UTC | 56 | 183.91.20.0/23 | AS45903 |
| Oct 17, 01:17 UTC | 56 | 113.20.118.0/23 | AS45903 |
| Oct 17, 01:17 UTC | 56 | 101.99.60.0/23 | AS45903 |
| Oct 17, 01:17 UTC | 56 | 170.244.248.0/22 | AS264943 |
| Oct 17, 01:17 UTC | 58 | 193.200.36.0/24 | AS42620 |
| Oct 17, 01:17 UTC | 56 | 101.237.240.0/24 | AS135377 |
| Oct 17, 01:17 UTC | 56 | 138.97.145.0/24 | AS266178 |
| Oct 17, 01:17 UTC | 56 | 45.122.255.0/24 | AS45903 |
| Oct 17, 01:17 UTC | 56 | 113.20.122.0/24 | AS45903 |
| Oct 17, 01:17 UTC | 56 | 203.205.45.0/24 | AS45903 |
| Oct 17, 01:17 UTC | 56 | 101.99.40.0/24 | AS45903 |
| Oct 17, 01:17 UTC | 56 | 140.150.31.0/24 | AS54994 |
| Oct 17, 01:17 UTC | 56 | 192.144.67.0/24 | AS266178 |
| Oct 17, 01:17 UTC | 56 | 203.205.9.0/24 | AS45903 |
| Oct 17, 01:17 UTC | 56 | 101.99.59.0/24 | AS45903 |
| Oct 17, 01:17 UTC | 56 | 203.205.21.0/24 | AS45903 |
| Oct 17, 01:17 UTC | 56 | 203.205.63.0/24 | AS45903 |
| Oct 17, 01:17 UTC | 56 | 203.205.6.0/24 | AS45903 |
| Oct 17, 01:17 UTC | 56 | 203.205.37.0/24 | AS45903 |
| Oct 17, 01:17 UTC | 56 | 119.82.141.0/24 | AS45903 |
| Oct 17, 01:17 UTC | 56 | 82.41.133.0/24 | AS213169 |
| Oct 17, 00:16 UTC | 56 | 200.47.78.0/24 | AS7908 |
| Oct 17, 00:16 UTC | 58 | 23.142.89.0/24 | AS203729 |
| Oct 17, 00:16 UTC | 56 | 200.47.224.0/22 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.168.0/24 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.104.0/24 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.50.0/24 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.148.0/24 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.192.0/21 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.107.0/24 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.126.0/24 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.50.0/23 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 85.255.156.0/24 | AS43848 |
| Oct 17, 00:16 UTC | 56 | 200.47.240.0/21 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.58.0/24 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.96.0/24 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.83.0/24 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.92.0/22 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 85.255.154.0/24 | AS43848 |
| Oct 17, 00:16 UTC | 56 | 200.47.248.0/21 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.105.0/24 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.112.0/22 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.108.0/22 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.163.0/24 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.162.0/24 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.123.0/24 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.196.0/24 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.87.0/24 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.100.0/22 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.90.0/23 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.165.0/24 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.56.0/21 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.49.0/24 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.128.0/21 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.200.0/21 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.108.0/24 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.144.0/24 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.104.0/23 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.167.0/24 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.74.0/24 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.55.0/24 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.52.0/22 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.80.0/22 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.85.0/24 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.109.0/24 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.86.0/24 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.161.0/24 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.127.0/24 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.116.0/23 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.98.0/24 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.119.0/24 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.122.0/23 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.93.0/24 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.121.0/24 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.106.0/23 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.64.0/21 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.62.0/24 | AS7908 |
| Oct 17, 00:16 UTC | 56 | 200.47.232.0/21 | AS7908 |
| Oct 17, 00:16 UTC | 60 | 168.90.32.0/24 | AS265263 |
| Oct 17, 00:16 UTC | 56 | 200.47.92.0/24 | AS7908 |
| Oct 16, 22:16 UTC | 56 | 77.37.42.0/24 | AS47583 |
| Oct 16, 22:16 UTC | 56 | 57.69.48.0/24 | AS51964 |
| Oct 16, 22:16 UTC | 56 | 198.36.36.0/22 | AS5080 |
| Oct 16, 22:16 UTC | 56 | 198.36.32.0/22 | AS5080 |
| Oct 16, 22:16 UTC | 56 | 198.36.40.0/23 | AS5080 |
| Oct 16, 22:16 UTC | 56 | 81.28.244.0/24 | AS51538 |
| Oct 16, 21:16 UTC | 56 | 180.183.232.0/21 | AS138524 |
| Oct 16, 21:16 UTC | 56 | 180.183.192.0/21 | AS138524 |
| Oct 16, 21:16 UTC | 56 | 180.183.24.0/21 | AS138524 |
| Oct 16, 21:16 UTC | 56 | 180.183.48.0/21 | AS138524 |
| Oct 16, 21:16 UTC | 56 | 180.183.208.0/21 | AS138524 |
| Oct 16, 21:16 UTC | 56 | 180.183.96.0/21 | AS138524 |
| Oct 16, 21:16 UTC | 56 | 180.183.64.0/21 | AS138524 |
| Oct 16, 21:16 UTC | 56 | 180.183.32.0/21 | AS138524 |
| Oct 16, 21:16 UTC | 56 | 180.183.104.0/21 | AS138524 |
| Oct 16, 21:16 UTC | 56 | 180.183.224.0/21 | AS138524 |
| Oct 16, 21:16 UTC | 56 | 180.183.80.0/21 | AS138524 |
| Oct 16, 21:16 UTC | 56 | 180.183.88.0/21 | AS138524 |
| Oct 16, 21:16 UTC | 56 | 180.183.56.0/21 | AS138524 |
| Oct 16, 21:16 UTC | 56 | 180.183.40.0/21 | AS138524 |
| Oct 16, 21:16 UTC | 56 | 180.183.16.0/21 | AS138524 |
| Oct 16, 21:16 UTC | 56 | 180.183.112.0/21 | AS138524 |
| Oct 16, 21:16 UTC | 56 | 180.183.120.0/21 | AS138524 |
| Oct 16, 21:16 UTC | 56 | 162.211.133.0/24 | AS55263 |
| Oct 16, 21:16 UTC | 56 | 180.183.216.0/21 | AS138524 |
| Oct 16, 21:16 UTC | 56 | 180.183.200.0/21 | AS138524 |
| Oct 16, 21:16 UTC | 56 | 180.183.72.0/21 | AS138524 |
| Oct 16, 20:16 UTC | 58 | 187.79.241.0/24 | AS63907 |
| Oct 16, 20:16 UTC | 58 | 185.255.89.0/24 | AS61173 |
| Oct 16, 20:16 UTC | 58 | 187.79.245.0/24 | AS218520 |
| Oct 16, 20:16 UTC | 56 | 128.124.224.0/19 | AS21497 |
| Oct 16, 20:16 UTC | 58 | 187.79.242.0/24 | AS152627 |
| Oct 16, 20:16 UTC | 58 | 23.188.168.0/24 | AS401339 |
| Oct 16, 20:16 UTC | 58 | 187.79.243.0/24 | AS152627 |
| Oct 16, 19:16 UTC | 58 | 87.248.240.0/20 | AS35807 |
| Oct 16, 19:16 UTC | 56 | 103.134.161.0/24 | AS136284 |
| Oct 16, 19:16 UTC | 56 | 102.221.15.0/24 | AS328810 |
| Oct 16, 19:16 UTC | 56 | 8.41.203.0/24 | AS63427 |
| Oct 16, 19:16 UTC | 58 | 185.84.32.0/23 | AS35807 |
| Oct 16, 19:16 UTC | 56 | 103.134.163.0/24 | AS136284 |
| Oct 16, 19:16 UTC | 56 | 45.175.73.0/24 | AS268888 |
| Oct 16, 19:16 UTC | 56 | 109.125.253.0/24 | AS44692 |
| Oct 16, 19:16 UTC | 58 | 88.201.192.0/18 | AS35807 |
| Oct 16, 19:16 UTC | 56 | 8.41.193.0/24 | AS63427 |
| Oct 16, 19:16 UTC | 56 | 103.121.155.0/24 | AS136284 |
| Oct 16, 18:16 UTC | 58 | 177.177.225.0/24 | AS60326 |
| Oct 16, 18:16 UTC | 56 | 42.96.51.0/24 | AS45903 |
| Oct 16, 18:16 UTC | 56 | 196.208.36.0/22 | AS20011 |
| Oct 16, 18:16 UTC | 56 | 203.189.135.0/24 | AS23673 |
| Oct 16, 18:16 UTC | 56 | 196.28.192.0/19 | AS20011 |
| Oct 16, 18:16 UTC | 56 | 210.214.77.0/24 | AS9583 |
| Oct 16, 18:16 UTC | 56 | 164.151.128.0/17 | AS37130 |
| Oct 16, 18:16 UTC | 56 | 196.208.48.0/22 | AS20011 |
| Oct 16, 18:16 UTC | 56 | 160.116.216.0/22 | AS50867 |
| Oct 16, 18:16 UTC | 56 | 196.208.24.0/22 | AS20011 |
| Oct 16, 18:16 UTC | 56 | 196.2.28.0/23 | AS20011 |
| Oct 16, 18:16 UTC | 56 | 196.208.80.0/22 | AS20011 |
| Oct 16, 18:16 UTC | 56 | 196.208.56.0/22 | AS20011 |
| Oct 16, 18:16 UTC | 56 | 198.54.10.0/24 | AS37130 |
| Oct 16, 18:16 UTC | 56 | 177.72.38.0/23 | AS262540 |
| Oct 16, 18:16 UTC | 56 | 196.2.24.0/22 | AS20011 |
| Oct 16, 18:16 UTC | 56 | 198.54.3.0/24 | AS37130 |
| Oct 16, 18:16 UTC | 56 | 196.208.44.0/22 | AS20011 |
| Oct 16, 18:16 UTC | 56 | 164.151.0.0/17 | AS37130 |
| Oct 16, 18:16 UTC | 56 | 177.72.36.0/23 | AS262540 |
| Oct 16, 18:16 UTC | 56 | 198.54.2.0/24 | AS37130 |
| Oct 16, 18:16 UTC | 56 | 113.20.112.0/23 | AS45903 |
| Oct 16, 18:16 UTC | 56 | 196.2.16.0/23 | AS20011 |
| Oct 16, 18:16 UTC | 56 | 192.96.240.0/24 | AS37130 |
| Oct 16, 18:16 UTC | 56 | 192.96.239.0/24 | AS37130 |
| Oct 16, 18:16 UTC | 56 | 163.195.0.0/17 | AS37130 |
| Oct 16, 18:16 UTC | 56 | 163.195.38.0/24 | AS37130 |
| Oct 16, 18:16 UTC | 56 | 196.28.40.0/24 | AS20011 |
| Oct 16, 18:16 UTC | 56 | 196.28.46.0/23 | AS20011 |
| Oct 16, 18:16 UTC | 56 | 198.54.1.0/24 | AS37130 |
| Oct 16, 18:16 UTC | 56 | 196.2.31.0/24 | AS20011 |
| Oct 16, 18:16 UTC | 56 | 164.146.0.0/15 | AS37130 |
| Oct 16, 18:16 UTC | 56 | 197.101.162.0/23 | AS20011 |
| Oct 16, 18:16 UTC | 56 | 185.14.6.0/23 | AS42482 |
| Oct 16, 18:16 UTC | 58 | 177.177.224.0/24 | AS60326 |
| Oct 16, 18:16 UTC | 56 | 197.101.170.0/23 | AS20011 |
| Oct 16, 18:16 UTC | 56 | 196.208.40.0/22 | AS20011 |
| Oct 16, 18:16 UTC | 56 | 163.195.128.0/17 | AS37130 |
| Oct 16, 18:16 UTC | 56 | 192.96.238.0/24 | AS37130 |
| Oct 16, 18:16 UTC | 56 | 163.195.40.0/22 | AS37130 |
| Oct 16, 18:16 UTC | 56 | 196.28.40.0/21 | AS20011 |
| Oct 16, 18:16 UTC | 56 | 201.168.192.0/18 | AS19332 |
| Oct 16, 18:16 UTC | 56 | 163.52.14.0/23 | AS45903 |
| Oct 16, 18:16 UTC | 56 | 197.101.134.0/23 | AS20011 |
| Oct 16, 18:16 UTC | 56 | 196.208.56.0/21 | AS20011 |
| Oct 16, 18:16 UTC | 56 | 192.96.241.0/24 | AS37130 |
| Oct 16, 18:16 UTC | 56 | 198.54.8.0/24 | AS37130 |
| Oct 16, 18:16 UTC | 56 | 196.2.16.0/21 | AS20011 |
Frequently Asked Questions
What is a BGP AS-path anomaly?
An AS-path anomaly is an unusual or implausible sequence of Autonomous Systems in a route advertisement whose unique-AS-path length (prepends collapsed) deviates sharply from the recent 36-hour median for that prefix — an unexpected transit AS, a loop, or a sudden detour. It can reveal a route leak or a path-prepending mistake.
Where does this data come from?
Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.
How often is the AS-path anomaly feed updated?
The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-10-17 03:15 UTC.
How do I subscribe to AS-path anomaly events?
Subscribe to the Atom feed at /pulse/bgp/aspath.atom or poll the JSON endpoint at /api/pulse/bgp/aspath.