Pulse — AS-path anomaly
Unique-AS-path lengths (prepends collapsed) that deviate sharply from the recent 36-hour median for that prefix.
What is AS-path anomaly?
An AS-path anomaly is an unusual or implausible sequence of Autonomous Systems in a route advertisement whose unique-AS-path length (prepends collapsed) deviates sharply from the recent 36-hour median for that prefix — an unexpected transit AS, a loop, or a sudden detour. It can reveal a route leak or a path-prepending mistake.
Geographic distribution
Flagged events
Showing 200 most recent of 5,024 · last 24h| When | Severity | Prefix | AS |
|---|---|---|---|
| Oct 14, 15:16 UTC | 56 | 179.189.19.0/24 | AS52630 |
| Oct 14, 15:16 UTC | 56 | 177.23.211.0/24 | AS262903 |
| Oct 14, 15:16 UTC | 56 | 189.51.111.0/24 | AS263349 |
| Oct 14, 15:16 UTC | 56 | 187.111.139.0/24 | AS53121 |
| Oct 14, 15:16 UTC | 56 | 210.18.112.0/24 | AS9583 |
| Oct 14, 15:16 UTC | 56 | 138.97.71.0/24 | AS264147 |
| Oct 14, 15:16 UTC | 56 | 186.249.31.0/24 | AS262463 |
| Oct 14, 15:16 UTC | 56 | 189.51.122.0/24 | AS263349 |
| Oct 14, 15:16 UTC | 56 | 202.9.75.0/24 | AS55510 |
| Oct 14, 15:16 UTC | 56 | 186.250.236.0/24 | AS262821 |
| Oct 14, 15:16 UTC | 56 | 168.90.146.0/23 | AS265272 |
| Oct 14, 15:16 UTC | 56 | 177.74.226.0/23 | AS263652 |
| Oct 14, 15:16 UTC | 56 | 45.238.86.0/23 | AS268329 |
| Oct 14, 15:16 UTC | 56 | 45.190.252.0/23 | AS269646 |
| Oct 14, 15:16 UTC | 56 | 177.124.2.0/23 | AS262311 |
| Oct 14, 15:16 UTC | 56 | 138.121.116.0/24 | AS264295 |
| Oct 14, 15:16 UTC | 56 | 177.85.80.0/23 | AS266160 |
| Oct 14, 15:16 UTC | 56 | 170.81.183.0/24 | AS53121 |
| Oct 14, 15:16 UTC | 56 | 44.30.104.0/24 | AS202858 |
| Oct 14, 15:16 UTC | 56 | 189.51.103.0/24 | AS263349 |
| Oct 14, 15:16 UTC | 56 | 168.227.102.0/24 | AS52603 |
| Oct 14, 15:16 UTC | 56 | 179.109.61.0/24 | AS262903 |
| Oct 14, 15:16 UTC | 56 | 138.97.68.0/23 | AS264147 |
| Oct 14, 15:16 UTC | 56 | 186.251.99.0/24 | AS262828 |
| Oct 14, 15:16 UTC | 56 | 37.10.57.0/24 | AS43996 |
| Oct 14, 15:16 UTC | 56 | 186.232.88.0/23 | AS269096 |
| Oct 14, 15:16 UTC | 56 | 177.154.212.0/23 | AS262293 |
| Oct 14, 15:16 UTC | 56 | 170.83.51.0/24 | AS266471 |
| Oct 14, 15:16 UTC | 56 | 45.235.30.0/24 | AS267407 |
| Oct 14, 15:16 UTC | 56 | 138.99.203.0/24 | AS264210 |
| Oct 14, 15:16 UTC | 56 | 187.111.128.0/24 | AS53121 |
| Oct 14, 15:16 UTC | 56 | 186.251.101.0/24 | AS262828 |
| Oct 14, 15:16 UTC | 56 | 187.103.40.0/22 | AS17222 |
| Oct 14, 15:16 UTC | 56 | 45.237.247.0/24 | AS268296 |
| Oct 14, 15:16 UTC | 56 | 189.51.107.0/24 | AS263349 |
| Oct 14, 15:16 UTC | 56 | 45.235.28.0/24 | AS267407 |
| Oct 14, 15:16 UTC | 56 | 187.120.183.0/24 | AS264013 |
| Oct 14, 15:16 UTC | 56 | 189.51.124.0/24 | AS263349 |
| Oct 14, 15:16 UTC | 56 | 189.51.117.0/24 | AS263349 |
| Oct 14, 15:16 UTC | 56 | 103.75.161.0/24 | AS135760 |
| Oct 14, 15:16 UTC | 56 | 189.51.97.0/24 | AS263349 |
| Oct 14, 15:16 UTC | 56 | 45.6.27.0/24 | AS266118 |
| Oct 14, 15:16 UTC | 56 | 45.190.254.0/23 | AS269646 |
| Oct 14, 15:16 UTC | 56 | 177.87.106.0/23 | AS262300 |
| Oct 14, 15:16 UTC | 56 | 45.65.142.0/23 | AS263652 |
| Oct 14, 15:16 UTC | 56 | 187.120.187.0/24 | AS264013 |
| Oct 14, 15:16 UTC | 56 | 191.36.226.0/23 | AS263980 |
| Oct 14, 15:16 UTC | 56 | 179.48.113.0/24 | AS271086 |
| Oct 14, 15:16 UTC | 56 | 45.64.195.0/24 | AS17625 |
| Oct 14, 15:16 UTC | 56 | 177.85.86.0/23 | AS266160 |
| Oct 14, 15:16 UTC | 56 | 179.109.56.0/24 | AS262903 |
| Oct 14, 15:16 UTC | 56 | 37.10.56.0/24 | AS43996 |
| Oct 14, 15:16 UTC | 56 | 103.75.160.0/24 | AS135760 |
| Oct 14, 15:16 UTC | 56 | 45.237.245.0/24 | AS268296 |
| Oct 14, 15:16 UTC | 56 | 200.188.217.0/24 | AS28590 |
| Oct 14, 15:16 UTC | 56 | 177.74.228.0/23 | AS263652 |
| Oct 14, 15:16 UTC | 56 | 45.65.140.0/23 | AS263652 |
| Oct 14, 15:16 UTC | 56 | 177.128.92.0/24 | AS262805 |
| Oct 14, 15:16 UTC | 56 | 138.36.2.0/24 | AS264562 |
| Oct 14, 15:16 UTC | 56 | 177.38.198.0/23 | AS262409 |
| Oct 14, 15:16 UTC | 56 | 179.108.26.0/23 | AS263267 |
| Oct 14, 15:16 UTC | 56 | 177.86.109.0/24 | AS262903 |
| Oct 14, 15:16 UTC | 56 | 187.111.133.0/24 | AS53121 |
| Oct 14, 15:16 UTC | 56 | 168.0.32.0/23 | AS265222 |
| Oct 14, 15:16 UTC | 56 | 187.111.140.0/24 | AS53121 |
| Oct 14, 15:16 UTC | 56 | 45.227.230.0/24 | AS271704 |
| Oct 14, 15:16 UTC | 56 | 179.0.46.0/24 | AS271408 |
| Oct 14, 15:16 UTC | 56 | 177.86.110.0/24 | AS262903 |
| Oct 14, 15:16 UTC | 56 | 189.51.113.0/24 | AS263349 |
| Oct 14, 15:16 UTC | 56 | 138.36.0.0/24 | AS264562 |
| Oct 14, 15:16 UTC | 56 | 168.90.144.0/23 | AS265272 |
| Oct 14, 15:16 UTC | 56 | 189.51.115.0/24 | AS263349 |
| Oct 14, 15:16 UTC | 56 | 187.103.44.0/22 | AS17222 |
| Oct 14, 15:16 UTC | 56 | 188.242.0.0/15 | AS35807 |
| Oct 14, 15:16 UTC | 56 | 164.163.19.0/24 | AS265952 |
| Oct 14, 15:16 UTC | 56 | 45.6.26.0/24 | AS266118 |
| Oct 14, 15:16 UTC | 56 | 201.159.144.0/24 | AS52603 |
| Oct 14, 15:16 UTC | 56 | 45.172.205.0/24 | AS268787 |
| Oct 14, 15:16 UTC | 56 | 45.164.203.0/24 | AS272174 |
| Oct 14, 15:16 UTC | 56 | 45.179.230.0/24 | AS269118 |
| Oct 14, 15:16 UTC | 56 | 45.175.248.0/23 | AS269096 |
| Oct 14, 15:16 UTC | 56 | 88.201.128.0/17 | AS35807 |
| Oct 14, 15:16 UTC | 56 | 186.227.124.0/24 | AS263278 |
| Oct 14, 15:16 UTC | 56 | 187.111.142.0/24 | AS53121 |
| Oct 14, 15:16 UTC | 56 | 168.181.153.0/24 | AS264295 |
| Oct 14, 15:16 UTC | 56 | 143.0.186.0/24 | AS264013 |
| Oct 14, 15:16 UTC | 56 | 177.39.10.0/23 | AS269096 |
| Oct 14, 15:16 UTC | 56 | 191.36.224.0/23 | AS263980 |
| Oct 14, 15:16 UTC | 56 | 103.67.96.0/24 | AS135760 |
| Oct 14, 15:16 UTC | 56 | 168.181.152.0/24 | AS264295 |
| Oct 14, 15:16 UTC | 56 | 179.125.24.0/24 | AS263626 |
| Oct 14, 15:16 UTC | 56 | 206.42.48.0/20 | AS28126 |
| Oct 14, 15:16 UTC | 56 | 138.118.63.0/24 | AS264248 |
| Oct 14, 15:16 UTC | 56 | 191.37.21.0/24 | AS263349 |
| Oct 14, 15:16 UTC | 56 | 94.19.0.0/16 | AS35807 |
| Oct 14, 15:16 UTC | 56 | 177.155.192.0/23 | AS262828 |
| Oct 14, 15:16 UTC | 56 | 177.37.26.0/24 | AS270675 |
| Oct 14, 15:16 UTC | 56 | 186.65.104.0/23 | AS266142 |
| Oct 14, 15:16 UTC | 56 | 45.232.244.0/23 | AS263980 |
| Oct 14, 15:16 UTC | 56 | 189.51.120.0/24 | AS263349 |
| Oct 14, 15:16 UTC | 56 | 189.51.105.0/24 | AS263349 |
| Oct 14, 15:16 UTC | 56 | 189.51.108.0/24 | AS263349 |
| Oct 14, 15:16 UTC | 56 | 186.250.237.0/24 | AS262821 |
| Oct 14, 15:16 UTC | 56 | 168.232.84.0/24 | AS264562 |
| Oct 14, 15:16 UTC | 56 | 189.51.104.0/24 | AS263349 |
| Oct 14, 15:16 UTC | 56 | 45.174.188.0/24 | AS264562 |
| Oct 14, 15:16 UTC | 56 | 189.28.171.0/24 | AS28300 |
| Oct 14, 15:16 UTC | 56 | 200.152.30.0/24 | AS28590 |
| Oct 14, 15:16 UTC | 56 | 187.111.132.0/24 | AS53121 |
| Oct 14, 15:16 UTC | 56 | 177.38.196.0/23 | AS262409 |
| Oct 14, 15:16 UTC | 56 | 177.47.80.0/24 | AS262480 |
| Oct 14, 15:16 UTC | 56 | 170.246.18.0/24 | AS264295 |
| Oct 14, 15:16 UTC | 56 | 189.51.126.0/24 | AS263349 |
| Oct 14, 15:16 UTC | 56 | 103.134.161.0/24 | AS136284 |
| Oct 14, 15:16 UTC | 56 | 191.37.154.0/23 | AS263362 |
| Oct 14, 15:16 UTC | 56 | 138.99.201.0/24 | AS264210 |
| Oct 14, 15:16 UTC | 56 | 45.6.25.0/24 | AS266118 |
| Oct 14, 15:16 UTC | 56 | 138.94.66.0/24 | AS264135 |
| Oct 14, 15:16 UTC | 56 | 168.227.101.0/24 | AS52603 |
| Oct 14, 15:16 UTC | 56 | 177.38.192.0/23 | AS262409 |
| Oct 14, 15:16 UTC | 56 | 204.157.166.0/24 | AS272744 |
| Oct 14, 15:16 UTC | 56 | 187.49.176.0/24 | AS264562 |
| Oct 14, 15:16 UTC | 56 | 177.92.96.0/22 | AS17222 |
| Oct 14, 15:16 UTC | 56 | 45.185.120.0/23 | AS269096 |
| Oct 14, 15:16 UTC | 56 | 177.39.212.0/23 | AS262433 |
| Oct 14, 15:16 UTC | 56 | 200.152.28.0/24 | AS28590 |
| Oct 14, 15:16 UTC | 56 | 131.0.255.0/24 | AS263555 |
| Oct 14, 15:16 UTC | 56 | 186.251.100.0/24 | AS262828 |
| Oct 14, 15:16 UTC | 56 | 177.223.187.0/24 | AS28300 |
| Oct 14, 15:16 UTC | 56 | 189.51.110.0/24 | AS263349 |
| Oct 14, 15:16 UTC | 56 | 45.189.240.0/23 | AS269604 |
| Oct 14, 15:16 UTC | 56 | 203.77.174.0/24 | AS153526 |
| Oct 14, 15:16 UTC | 56 | 177.74.236.0/23 | AS263652 |
| Oct 14, 15:16 UTC | 56 | 179.189.20.0/24 | AS52630 |
| Oct 14, 15:16 UTC | 56 | 192.140.14.0/23 | AS266160 |
| Oct 14, 15:16 UTC | 56 | 186.232.94.0/23 | AS269096 |
| Oct 14, 15:16 UTC | 56 | 203.77.175.0/24 | AS153526 |
| Oct 14, 15:16 UTC | 56 | 177.129.241.0/24 | AS270888 |
| Oct 14, 15:16 UTC | 56 | 186.251.182.0/23 | AS262832 |
| Oct 14, 15:16 UTC | 56 | 45.165.211.0/24 | AS268692 |
| Oct 14, 15:16 UTC | 56 | 177.39.210.0/23 | AS262433 |
| Oct 14, 15:16 UTC | 56 | 45.185.4.0/23 | AS269355 |
| Oct 14, 15:16 UTC | 56 | 201.71.247.0/24 | AS268976 |
| Oct 14, 15:16 UTC | 56 | 186.251.98.0/23 | AS262828 |
| Oct 14, 15:16 UTC | 56 | 186.250.178.0/24 | AS53216 |
| Oct 14, 15:16 UTC | 56 | 177.86.108.0/24 | AS262903 |
| Oct 14, 15:16 UTC | 56 | 177.124.76.0/23 | AS52601 |
| Oct 14, 15:16 UTC | 56 | 200.50.151.0/24 | AS271652 |
| Oct 14, 15:16 UTC | 56 | 138.97.70.0/23 | AS264147 |
| Oct 14, 15:16 UTC | 56 | 45.179.229.0/24 | AS269118 |
| Oct 14, 15:16 UTC | 56 | 189.51.100.0/24 | AS263349 |
| Oct 14, 15:16 UTC | 56 | 170.79.105.0/24 | AS268976 |
| Oct 14, 15:16 UTC | 56 | 45.237.246.0/24 | AS268296 |
| Oct 14, 15:16 UTC | 56 | 45.165.132.0/24 | AS268676 |
| Oct 14, 15:16 UTC | 56 | 192.140.12.0/23 | AS266160 |
| Oct 14, 15:16 UTC | 56 | 177.70.250.0/24 | AS262995 |
| Oct 14, 15:16 UTC | 56 | 177.223.165.0/24 | AS28300 |
| Oct 14, 15:16 UTC | 56 | 45.231.162.0/24 | AS267227 |
| Oct 14, 15:16 UTC | 56 | 191.7.204.0/22 | AS263327 |
| Oct 14, 15:16 UTC | 56 | 179.48.114.0/24 | AS271086 |
| Oct 14, 15:16 UTC | 56 | 177.10.208.0/23 | AS262856 |
| Oct 14, 15:16 UTC | 56 | 45.189.242.0/23 | AS269604 |
| Oct 14, 15:16 UTC | 56 | 186.251.97.0/24 | AS262828 |
| Oct 14, 15:16 UTC | 56 | 45.175.250.0/23 | AS269096 |
| Oct 14, 15:16 UTC | 56 | 161.38.40.0/24 | AS17222 |
| Oct 14, 15:16 UTC | 56 | 187.111.129.0/24 | AS53121 |
| Oct 14, 15:16 UTC | 56 | 189.51.121.0/24 | AS263349 |
| Oct 14, 15:16 UTC | 56 | 170.81.180.0/23 | AS53121 |
| Oct 14, 15:16 UTC | 56 | 223.30.210.0/24 | AS9583 |
| Oct 14, 15:16 UTC | 56 | 186.251.98.0/24 | AS262828 |
| Oct 14, 15:16 UTC | 56 | 170.254.46.0/23 | AS265153 |
| Oct 14, 15:16 UTC | 56 | 45.174.189.0/24 | AS264562 |
| Oct 14, 15:16 UTC | 56 | 179.109.62.0/24 | AS262903 |
| Oct 14, 15:16 UTC | 56 | 177.223.185.0/24 | AS28300 |
| Oct 14, 15:16 UTC | 56 | 177.74.232.0/23 | AS263652 |
| Oct 14, 15:16 UTC | 56 | 187.111.137.0/24 | AS53121 |
| Oct 14, 15:16 UTC | 56 | 164.163.18.0/24 | AS265952 |
| Oct 14, 15:16 UTC | 56 | 191.37.152.0/23 | AS263362 |
| Oct 14, 15:16 UTC | 56 | 189.51.114.0/24 | AS263349 |
| Oct 14, 15:16 UTC | 56 | 189.51.112.0/24 | AS263349 |
| Oct 14, 15:16 UTC | 56 | 186.232.90.0/23 | AS269096 |
| Oct 14, 15:16 UTC | 56 | 45.185.122.0/23 | AS269096 |
| Oct 14, 15:16 UTC | 56 | 177.124.0.0/23 | AS262311 |
| Oct 14, 15:16 UTC | 56 | 177.86.105.0/24 | AS262903 |
| Oct 14, 15:16 UTC | 56 | 200.106.192.0/23 | AS265475 |
| Oct 14, 15:16 UTC | 56 | 200.188.216.0/24 | AS28590 |
| Oct 14, 15:16 UTC | 56 | 177.91.164.0/24 | AS263445 |
| Oct 14, 15:16 UTC | 56 | 45.165.133.0/24 | AS268676 |
| Oct 14, 15:16 UTC | 56 | 187.111.136.0/24 | AS53121 |
| Oct 14, 15:16 UTC | 56 | 177.70.251.0/24 | AS262995 |
| Oct 14, 15:16 UTC | 56 | 138.121.117.0/24 | AS264295 |
| Oct 14, 15:16 UTC | 56 | 179.63.134.0/24 | AS271560 |
| Oct 14, 15:16 UTC | 56 | 170.246.17.0/24 | AS264295 |
| Oct 14, 15:16 UTC | 56 | 45.165.208.0/24 | AS268692 |
| Oct 14, 15:16 UTC | 56 | 168.181.155.0/24 | AS264295 |
| Oct 14, 15:16 UTC | 56 | 191.37.23.0/24 | AS263349 |
| Oct 14, 15:16 UTC | 56 | 201.182.48.0/23 | AS267521 |
| Oct 14, 15:16 UTC | 56 | 187.120.179.0/24 | AS264013 |
| Oct 14, 15:16 UTC | 56 | 170.81.182.0/23 | AS53121 |
| Oct 14, 15:16 UTC | 56 | 103.85.210.0/24 | AS135760 |
Frequently Asked Questions
What is a BGP AS-path anomaly?
An AS-path anomaly is an unusual or implausible sequence of Autonomous Systems in a route advertisement whose unique-AS-path length (prepends collapsed) deviates sharply from the recent 36-hour median for that prefix — an unexpected transit AS, a loop, or a sudden detour. It can reveal a route leak or a path-prepending mistake.
Where does this data come from?
Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.
How often is the AS-path anomaly feed updated?
The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-10-14 15:40 UTC.
How do I subscribe to AS-path anomaly events?
Subscribe to the Atom feed at /pulse/bgp/aspath.atom or poll the JSON endpoint at /api/pulse/bgp/aspath.