Pulse — AS-path anomaly
Unique-AS-path lengths (prepends collapsed) that deviate sharply from the recent 36-hour median for that prefix.
What is AS-path anomaly?
An AS-path anomaly is an unusual or implausible sequence of Autonomous Systems in a route advertisement whose unique-AS-path length (prepends collapsed) deviates sharply from the recent 36-hour median for that prefix — an unexpected transit AS, a loop, or a sudden detour. It can reveal a route leak or a path-prepending mistake.
Geographic distribution
Flagged events
Showing 200 most recent of 1,229 · last 24h| When | Severity | Prefix | AS |
|---|---|---|---|
| Oct 19, 03:16 UTC | 56 | 124.6.55.0/24 | AS24482 |
| Oct 19, 03:16 UTC | 56 | 212.102.98.0/24 | AS47254 |
| Oct 19, 03:16 UTC | 56 | 102.202.232.0/24 | AS30990 |
| Oct 19, 03:16 UTC | 56 | 124.6.54.0/24 | AS24482 |
| Oct 19, 03:16 UTC | 56 | 124.6.54.0/23 | AS24482 |
| Oct 19, 03:16 UTC | 56 | 44.48.41.0/24 | AS203729 |
| Oct 19, 03:16 UTC | 56 | 85.234.68.0/24 | AS199524 |
| Oct 19, 02:17 UTC | 56 | 122.10.120.0/22 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 197.241.72.0/21 | AS30990 |
| Oct 19, 02:17 UTC | 56 | 103.71.33.0/24 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 102.67.154.0/24 | AS328482 |
| Oct 19, 02:17 UTC | 56 | 197.241.80.0/20 | AS30990 |
| Oct 19, 02:17 UTC | 56 | 102.213.48.0/22 | AS328856 |
| Oct 19, 02:17 UTC | 56 | 154.219.128.0/18 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 154.84.100.0/22 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 117.18.224.0/22 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 91.217.178.0/24 | AS62378 |
| Oct 19, 02:17 UTC | 56 | 41.189.251.0/24 | AS30990 |
| Oct 19, 02:17 UTC | 56 | 122.10.0.0/18 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 154.212.64.0/18 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 192.249.80.0/20 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 154.86.128.0/19 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 197.241.122.0/24 | AS30990 |
| Oct 19, 02:17 UTC | 56 | 41.189.254.0/24 | AS30990 |
| Oct 19, 02:17 UTC | 56 | 45.226.96.0/24 | AS267020 |
| Oct 19, 02:17 UTC | 56 | 196.201.206.0/24 | AS30990 |
| Oct 19, 02:17 UTC | 56 | 144.48.58.0/24 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 197.241.112.0/22 | AS30990 |
| Oct 19, 02:17 UTC | 56 | 103.56.192.0/24 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 144.48.56.0/24 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 154.86.160.0/19 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 197.241.48.0/20 | AS30990 |
| Oct 19, 02:17 UTC | 56 | 41.189.232.0/21 | AS30990 |
| Oct 19, 02:17 UTC | 56 | 102.67.152.0/24 | AS328482 |
| Oct 19, 02:17 UTC | 56 | 103.214.32.0/22 | AS134548 |
| Oct 19, 02:17 UTC | 58 | 81.28.244.0/24 | AS51538 |
| Oct 19, 02:17 UTC | 56 | 103.88.184.0/22 | AS134548 |
| Oct 19, 02:17 UTC | 58 | 38.224.195.0/24 | AS174 |
| Oct 19, 02:17 UTC | 56 | 154.85.128.0/18 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 216.250.108.0/22 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 197.241.41.0/24 | AS30990 |
| Oct 19, 02:17 UTC | 56 | 41.189.252.0/24 | AS30990 |
| Oct 19, 02:17 UTC | 56 | 211.239.188.0/24 | AS9848 |
| Oct 19, 02:17 UTC | 56 | 154.212.72.0/21 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 93.93.242.0/24 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 103.73.88.0/22 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 197.241.44.0/24 | AS30990 |
| Oct 19, 02:17 UTC | 58 | 38.224.202.0/24 | AS174 |
| Oct 19, 02:17 UTC | 56 | 178.236.232.0/24 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 154.86.128.0/18 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 197.241.24.0/21 | AS30990 |
| Oct 19, 02:17 UTC | 56 | 154.85.160.0/19 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 154.86.128.0/20 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 103.56.193.0/24 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 103.14.112.0/22 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 154.85.128.0/19 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 197.241.116.0/22 | AS30990 |
| Oct 19, 02:17 UTC | 56 | 102.219.208.0/22 | AS328856 |
| Oct 19, 02:17 UTC | 56 | 103.75.19.0/24 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 154.212.96.0/20 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 197.241.123.0/24 | AS30990 |
| Oct 19, 02:17 UTC | 56 | 156.235.196.0/22 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 154.219.156.0/22 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 103.75.18.0/24 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 122.10.98.0/24 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 144.48.57.0/24 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 154.212.104.0/21 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 198.44.224.0/19 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 154.92.0.0/24 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 154.93.128.0/18 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 103.56.194.0/24 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 41.189.224.0/24 | AS30990 |
| Oct 19, 02:17 UTC | 56 | 157.119.112.0/22 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 154.93.128.0/20 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 93.93.241.0/24 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 102.210.100.0/23 | AS329379 |
| Oct 19, 02:17 UTC | 56 | 102.209.56.0/22 | AS328856 |
| Oct 19, 02:17 UTC | 56 | 41.189.225.0/24 | AS30990 |
| Oct 19, 02:17 UTC | 56 | 91.217.59.0/24 | AS197251 |
| Oct 19, 02:17 UTC | 56 | 41.189.226.0/24 | AS30990 |
| Oct 19, 02:17 UTC | 56 | 91.217.58.0/24 | AS197251 |
| Oct 19, 02:17 UTC | 56 | 93.93.240.0/24 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 198.44.232.0/22 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 197.241.66.0/23 | AS30990 |
| Oct 19, 02:17 UTC | 56 | 197.241.120.0/24 | AS30990 |
| Oct 19, 02:17 UTC | 56 | 197.241.127.0/24 | AS30990 |
| Oct 19, 02:17 UTC | 56 | 102.221.76.0/22 | AS328787 |
| Oct 19, 02:17 UTC | 56 | 116.204.244.0/22 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 197.241.96.0/20 | AS30990 |
| Oct 19, 02:17 UTC | 56 | 122.10.76.0/22 | AS134548 |
| Oct 19, 02:17 UTC | 58 | 203.148.76.0/24 | AS56012 |
| Oct 19, 02:17 UTC | 56 | 197.241.20.0/22 | AS30990 |
| Oct 19, 02:17 UTC | 58 | 203.148.75.0/24 | AS56012 |
| Oct 19, 02:17 UTC | 56 | 122.10.40.0/21 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 93.93.243.0/24 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 197.241.121.0/24 | AS30990 |
| Oct 19, 02:17 UTC | 56 | 154.212.88.0/21 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 197.241.18.0/24 | AS30990 |
| Oct 19, 02:17 UTC | 56 | 122.10.0.0/19 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 197.241.68.0/22 | AS30990 |
| Oct 19, 02:17 UTC | 58 | 203.148.77.0/24 | AS56012 |
| Oct 19, 02:17 UTC | 56 | 177.210.205.0/24 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 122.10.80.0/20 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 185.228.184.0/22 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 41.189.255.0/24 | AS30990 |
| Oct 19, 02:17 UTC | 56 | 144.48.59.0/24 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 103.243.128.0/22 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 154.84.64.0/18 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 197.241.0.0/20 | AS30990 |
| Oct 19, 02:17 UTC | 56 | 196.201.196.0/24 | AS30990 |
| Oct 19, 02:17 UTC | 58 | 203.148.78.0/24 | AS56012 |
| Oct 19, 02:17 UTC | 56 | 154.86.140.0/22 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 45.226.97.0/24 | AS267020 |
| Oct 19, 02:17 UTC | 60 | 82.147.91.0/24 | AS197392 |
| Oct 19, 02:17 UTC | 56 | 103.75.17.0/24 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 103.71.32.0/24 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 154.212.64.0/20 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 102.67.153.0/24 | AS328482 |
| Oct 19, 02:17 UTC | 56 | 154.219.128.0/20 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 154.93.152.0/21 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 197.241.43.0/24 | AS30990 |
| Oct 19, 02:17 UTC | 56 | 122.10.32.0/19 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 198.44.244.0/22 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 102.67.155.0/24 | AS328482 |
| Oct 19, 02:17 UTC | 56 | 144.48.56.0/22 | AS134548 |
| Oct 19, 02:17 UTC | 56 | 197.241.17.0/24 | AS30990 |
| Oct 19, 02:17 UTC | 56 | 41.189.228.0/24 | AS30990 |
| Oct 19, 02:17 UTC | 56 | 154.218.96.0/22 | AS134548 |
| Oct 19, 01:17 UTC | 56 | 45.175.90.0/24 | AS268892 |
| Oct 19, 01:17 UTC | 56 | 45.175.91.0/24 | AS268892 |
| Oct 19, 01:17 UTC | 56 | 201.218.171.0/24 | AS271370 |
| Oct 19, 01:17 UTC | 56 | 177.130.16.0/20 | AS52742 |
| Oct 19, 01:17 UTC | 56 | 190.124.27.0/24 | AS52304 |
| Oct 19, 01:17 UTC | 56 | 177.130.24.0/21 | AS52742 |
| Oct 19, 01:17 UTC | 58 | 194.126.58.0/23 | AS25122 |
| Oct 19, 01:17 UTC | 56 | 177.130.16.0/21 | AS52742 |
| Oct 19, 01:17 UTC | 56 | 45.175.89.0/24 | AS268892 |
| Oct 19, 01:17 UTC | 58 | 194.126.59.0/24 | AS25122 |
| Oct 19, 01:17 UTC | 56 | 45.175.88.0/24 | AS268892 |
| Oct 19, 01:17 UTC | 56 | 103.56.204.0/24 | AS58477 |
| Oct 19, 01:17 UTC | 56 | 177.93.132.0/22 | AS272432 |
| Oct 19, 01:17 UTC | 58 | 194.126.57.0/24 | AS25122 |
| Oct 19, 01:17 UTC | 58 | 194.126.62.0/23 | AS25122 |
| Oct 19, 01:17 UTC | 58 | 194.126.62.0/24 | AS25122 |
| Oct 19, 00:16 UTC | 58 | 196.12.156.0/24 | AS37006 |
| Oct 19, 00:16 UTC | 58 | 196.12.140.0/24 | AS37006 |
| Oct 19, 00:16 UTC | 58 | 196.12.152.0/24 | AS37006 |
| Oct 19, 00:16 UTC | 58 | 204.157.236.0/24 | AS52511 |
| Oct 19, 00:16 UTC | 58 | 196.216.81.0/24 | AS37006 |
| Oct 19, 00:16 UTC | 58 | 196.12.130.0/24 | AS37006 |
| Oct 19, 00:16 UTC | 58 | 196.12.154.0/24 | AS37006 |
| Oct 19, 00:16 UTC | 58 | 196.12.138.0/24 | AS37006 |
| Oct 19, 00:16 UTC | 56 | 91.92.41.0/24 | AS211443 |
| Oct 19, 00:16 UTC | 56 | 178.215.227.0/24 | AS211443 |
| Oct 19, 00:16 UTC | 58 | 196.12.151.0/24 | AS37006 |
| Oct 19, 00:16 UTC | 58 | 196.12.134.0/24 | AS37006 |
| Oct 19, 00:16 UTC | 58 | 196.12.144.0/24 | AS37006 |
| Oct 19, 00:16 UTC | 58 | 196.12.131.0/24 | AS37006 |
| Oct 19, 00:16 UTC | 58 | 196.12.129.0/24 | AS37006 |
| Oct 19, 00:16 UTC | 58 | 196.12.145.0/24 | AS37006 |
| Oct 19, 00:16 UTC | 58 | 196.12.159.0/24 | AS37006 |
| Oct 19, 00:16 UTC | 58 | 196.12.158.0/24 | AS37006 |
| Oct 19, 00:16 UTC | 56 | 91.197.54.0/24 | AS49356 |
| Oct 19, 00:16 UTC | 58 | 196.12.157.0/24 | AS37006 |
| Oct 19, 00:16 UTC | 58 | 196.12.148.0/24 | AS37006 |
| Oct 19, 00:16 UTC | 58 | 196.12.153.0/24 | AS37006 |
| Oct 19, 00:16 UTC | 58 | 196.12.143.0/24 | AS37006 |
| Oct 19, 00:16 UTC | 58 | 196.12.146.0/24 | AS37006 |
| Oct 19, 00:16 UTC | 58 | 196.216.80.0/24 | AS37006 |
| Oct 19, 00:16 UTC | 58 | 196.12.147.0/24 | AS37006 |
| Oct 19, 00:16 UTC | 56 | 103.39.251.0/24 | AS58678 |
| Oct 19, 00:16 UTC | 58 | 196.12.155.0/24 | AS37006 |
| Oct 19, 00:16 UTC | 58 | 196.12.149.0/24 | AS37006 |
| Oct 19, 00:16 UTC | 58 | 196.12.139.0/24 | AS37006 |
| Oct 19, 00:16 UTC | 58 | 196.12.135.0/24 | AS37006 |
| Oct 19, 00:16 UTC | 58 | 169.255.186.0/24 | AS327885 |
| Oct 19, 00:16 UTC | 58 | 196.12.128.0/24 | AS37006 |
| Oct 19, 00:16 UTC | 58 | 196.12.137.0/24 | AS37006 |
| Oct 19, 00:16 UTC | 58 | 196.12.132.0/24 | AS37006 |
| Oct 19, 00:16 UTC | 58 | 196.12.150.0/24 | AS37006 |
| Oct 18, 23:17 UTC | 56 | 92.60.77.0/24 | AS214557 |
| Oct 18, 23:17 UTC | 56 | 151.186.76.0/24 | AS36692 |
| Oct 18, 23:17 UTC | 56 | 177.92.167.0/24 | AS61918 |
| Oct 18, 23:17 UTC | 56 | 61.110.241.0/24 | AS54994 |
| Oct 18, 23:17 UTC | 56 | 176.240.4.0/22 | AS47524 |
| Oct 18, 23:17 UTC | 56 | 163.171.193.0/24 | AS54994 |
| Oct 18, 23:17 UTC | 56 | 185.135.16.0/24 | AS43848 |
| Oct 18, 23:17 UTC | 56 | 23.34.84.0/22 | AS25019 |
| Oct 18, 23:17 UTC | 56 | 185.132.233.0/24 | AS204657 |
| Oct 18, 23:17 UTC | 56 | 81.31.194.0/24 | AS208220 |
| Oct 18, 23:17 UTC | 56 | 154.73.100.0/24 | AS327746 |
| Oct 18, 23:17 UTC | 56 | 154.94.5.0/24 | AS142403 |
| Oct 18, 23:17 UTC | 56 | 45.151.91.0/24 | AS209101 |
| Oct 18, 23:17 UTC | 56 | 138.113.221.0/24 | AS54994 |
| Oct 18, 23:17 UTC | 56 | 102.216.207.0/24 | AS327746 |
| Oct 18, 23:17 UTC | 56 | 5.83.158.0/24 | AS218500 |
| Oct 18, 23:17 UTC | 56 | 39.109.123.0/24 | AS142403 |
| Oct 18, 23:17 UTC | 56 | 217.60.101.0/24 | AS208220 |
| Oct 18, 23:17 UTC | 56 | 178.233.238.0/23 | AS47524 |
| Oct 18, 23:17 UTC | 56 | 185.109.84.0/23 | AS13214 |
Frequently Asked Questions
What is a BGP AS-path anomaly?
An AS-path anomaly is an unusual or implausible sequence of Autonomous Systems in a route advertisement whose unique-AS-path length (prepends collapsed) deviates sharply from the recent 36-hour median for that prefix — an unexpected transit AS, a loop, or a sudden detour. It can reveal a route leak or a path-prepending mistake.
Where does this data come from?
Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.
How often is the AS-path anomaly feed updated?
The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-10-19 04:00 UTC.
How do I subscribe to AS-path anomaly events?
Subscribe to the Atom feed at /pulse/bgp/aspath.atom or poll the JSON endpoint at /api/pulse/bgp/aspath.