Pulse — AS-path anomaly
Unique-AS-path lengths (prepends collapsed) that deviate sharply from the recent 36-hour median for that prefix.
What is AS-path anomaly?
An AS-path anomaly is an unusual or implausible sequence of Autonomous Systems in a route advertisement whose unique-AS-path length (prepends collapsed) deviates sharply from the recent 36-hour median for that prefix — an unexpected transit AS, a loop, or a sudden detour. It can reveal a route leak or a path-prepending mistake.
Geographic distribution
Flagged events
Showing 200 most recent of 4,870 · last 24h| When | Severity | Prefix | AS |
|---|---|---|---|
| Oct 14, 10:16 UTC | 56 | 37.57.33.0/24 | AS13188 |
| Oct 14, 10:16 UTC | 56 | 94.140.192.0/19 | AS35000 |
| Oct 14, 10:16 UTC | 56 | 91.192.48.0/22 | AS208245 |
| Oct 14, 10:16 UTC | 56 | 24.48.166.0/24 | AS11492 |
| Oct 14, 10:16 UTC | 60 | 2.75.116.0/23 | AS29355 |
| Oct 14, 10:16 UTC | 60 | 2.75.252.0/24 | AS29355 |
| Oct 14, 10:16 UTC | 56 | 88.158.129.0/24 | AS15471 |
| Oct 14, 10:16 UTC | 56 | 38.156.100.0/23 | AS263793 |
| Oct 14, 10:16 UTC | 56 | 80.75.144.0/21 | AS44902 |
| Oct 14, 10:16 UTC | 56 | 46.8.163.0/24 | AS201746 |
| Oct 14, 10:16 UTC | 56 | 38.84.24.0/24 | AS209553 |
| Oct 14, 10:16 UTC | 56 | 152.236.130.0/23 | AS49915 |
| Oct 14, 10:16 UTC | 56 | 69.41.38.0/24 | AS19197 |
| Oct 14, 10:16 UTC | 56 | 5.149.132.0/23 | AS35753 |
| Oct 14, 10:16 UTC | 56 | 102.34.7.0/24 | AS327687 |
| Oct 14, 10:16 UTC | 56 | 44.32.63.0/24 | AS215734 |
| Oct 14, 10:16 UTC | 56 | 5.32.184.0/21 | AS198904 |
| Oct 14, 10:16 UTC | 56 | 69.128.144.0/24 | AS20127 |
| Oct 14, 10:16 UTC | 56 | 45.91.195.0/24 | AS211161 |
| Oct 14, 10:16 UTC | 56 | 103.234.232.0/22 | AS12886 |
| Oct 14, 10:16 UTC | 56 | 93.95.5.0/24 | AS44858 |
| Oct 14, 10:16 UTC | 60 | 2.75.119.0/24 | AS29355 |
| Oct 14, 10:16 UTC | 56 | 38.226.24.0/22 | AS272894 |
| Oct 14, 10:16 UTC | 56 | 91.227.55.0/24 | AS48384 |
| Oct 14, 10:16 UTC | 56 | 46.219.198.0/24 | AS31148 |
| Oct 14, 10:16 UTC | 56 | 93.184.141.0/24 | AS43066 |
| Oct 14, 10:16 UTC | 60 | 2.75.46.0/23 | AS29355 |
| Oct 14, 10:16 UTC | 60 | 2.75.180.0/24 | AS29355 |
| Oct 14, 10:16 UTC | 60 | 2.75.50.0/23 | AS29355 |
| Oct 14, 10:16 UTC | 56 | 38.148.192.0/22 | AS8796 |
| Oct 14, 10:16 UTC | 60 | 2.75.155.0/24 | AS29355 |
| Oct 14, 10:16 UTC | 58 | 37.239.172.0/22 | AS203214 |
| Oct 14, 10:16 UTC | 56 | 185.137.0.0/23 | AS203372 |
| Oct 14, 10:16 UTC | 56 | 66.9.162.0/23 | AS14593 |
| Oct 14, 10:16 UTC | 60 | 2.75.161.0/24 | AS29355 |
| Oct 14, 10:16 UTC | 56 | 37.148.220.0/22 | AS207645 |
| Oct 14, 10:16 UTC | 56 | 24.116.223.0/24 | AS11492 |
| Oct 14, 10:16 UTC | 56 | 23.208.208.0/22 | AS6057 |
| Oct 14, 10:16 UTC | 56 | 74.209.153.0/24 | AS39948 |
| Oct 14, 10:16 UTC | 56 | 66.234.88.0/23 | AS397048 |
| Oct 14, 10:16 UTC | 56 | 77.123.140.0/22 | AS35680 |
| Oct 14, 10:16 UTC | 56 | 46.182.176.0/21 | AS21221 |
| Oct 14, 10:16 UTC | 60 | 2.75.122.0/23 | AS29355 |
| Oct 14, 10:16 UTC | 56 | 94.188.245.0/24 | AS212527 |
| Oct 14, 10:16 UTC | 56 | 88.158.28.0/23 | AS15471 |
| Oct 14, 10:16 UTC | 56 | 185.214.104.0/22 | AS48351 |
| Oct 14, 10:16 UTC | 56 | 5.255.119.0/24 | AS60404 |
| Oct 14, 10:16 UTC | 56 | 91.212.136.0/24 | AS199217 |
| Oct 14, 10:16 UTC | 56 | 216.224.249.0/24 | AS39948 |
| Oct 14, 10:16 UTC | 56 | 91.223.2.0/24 | AS213335 |
| Oct 14, 10:16 UTC | 58 | 2.75.240.0/21 | AS29355 |
| Oct 14, 10:16 UTC | 56 | 5.2.66.0/24 | AS60404 |
| Oct 14, 10:16 UTC | 56 | 80.94.0.0/20 | AS39263 |
| Oct 14, 10:16 UTC | 56 | 5.2.79.0/24 | AS60404 |
| Oct 14, 10:16 UTC | 56 | 85.132.136.0/22 | AS205400 |
| Oct 14, 10:16 UTC | 56 | 89.38.48.0/24 | AS34740 |
| Oct 14, 10:16 UTC | 56 | 86.38.113.0/24 | AS198651 |
| Oct 14, 10:16 UTC | 56 | 66.22.111.0/24 | AS48851 |
| Oct 14, 10:16 UTC | 56 | 41.79.20.0/22 | AS37314 |
| Oct 14, 10:16 UTC | 56 | 93.157.80.0/21 | AS41714 |
| Oct 14, 10:16 UTC | 56 | 71.18.210.0/24 | AS396986 |
| Oct 14, 10:16 UTC | 56 | 104.253.69.0/24 | AS62160 |
| Oct 14, 10:16 UTC | 56 | 77.90.143.0/24 | AS42821 |
| Oct 14, 10:16 UTC | 56 | 138.84.54.0/23 | AS14593 |
| Oct 14, 10:16 UTC | 56 | 159.224.93.0/24 | AS13188 |
| Oct 14, 10:16 UTC | 60 | 2.75.78.0/23 | AS29355 |
| Oct 14, 10:16 UTC | 58 | 2.75.192.0/21 | AS29355 |
| Oct 14, 10:16 UTC | 56 | 109.251.109.0/24 | AS31148 |
| Oct 14, 10:16 UTC | 56 | 5.255.106.0/24 | AS60404 |
| Oct 14, 10:16 UTC | 56 | 164.73.0.0/16 | AS1797 |
| Oct 14, 10:16 UTC | 58 | 37.238.118.0/23 | AS203214 |
| Oct 14, 10:16 UTC | 56 | 74.209.156.0/24 | AS39948 |
| Oct 14, 10:16 UTC | 56 | 147.90.122.0/24 | AS203636 |
| Oct 14, 10:16 UTC | 56 | 46.219.124.0/24 | AS31148 |
| Oct 14, 10:16 UTC | 56 | 89.36.89.0/24 | AS43938 |
| Oct 14, 10:16 UTC | 60 | 2.75.124.0/23 | AS29355 |
| Oct 14, 10:16 UTC | 56 | 46.219.52.0/24 | AS31148 |
| Oct 14, 10:16 UTC | 56 | 38.95.180.0/24 | AS274201 |
| Oct 14, 10:16 UTC | 56 | 46.219.54.0/24 | AS31148 |
| Oct 14, 10:16 UTC | 60 | 2.75.14.0/24 | AS29355 |
| Oct 14, 10:16 UTC | 56 | 37.25.0.0/19 | AS25019 |
| Oct 14, 10:16 UTC | 56 | 141.226.55.0/24 | AS210625 |
| Oct 14, 10:16 UTC | 56 | 45.4.54.0/24 | AS266040 |
| Oct 14, 10:16 UTC | 60 | 2.75.218.0/24 | AS29355 |
| Oct 14, 10:16 UTC | 56 | 46.8.165.0/24 | AS201746 |
| Oct 14, 10:16 UTC | 56 | 88.158.21.0/24 | AS15471 |
| Oct 14, 10:16 UTC | 56 | 37.72.130.0/24 | AS200628 |
| Oct 14, 10:16 UTC | 56 | 206.84.62.0/23 | AS265175 |
| Oct 14, 10:16 UTC | 60 | 2.75.254.0/24 | AS29355 |
| Oct 14, 10:16 UTC | 56 | 5.255.100.0/24 | AS60404 |
| Oct 14, 10:16 UTC | 56 | 5.58.64.0/19 | AS16223 |
| Oct 14, 10:16 UTC | 60 | 2.75.87.0/24 | AS29355 |
| Oct 14, 10:16 UTC | 56 | 31.41.16.0/22 | AS44851 |
| Oct 14, 10:16 UTC | 56 | 206.84.36.0/22 | AS265175 |
| Oct 14, 10:16 UTC | 56 | 91.234.168.0/23 | AS50819 |
| Oct 14, 10:16 UTC | 56 | 128.14.138.0/24 | AS21859 |
| Oct 14, 10:16 UTC | 56 | 78.140.192.0/20 | AS35000 |
| Oct 14, 10:16 UTC | 56 | 109.251.219.0/24 | AS31148 |
| Oct 14, 10:16 UTC | 60 | 2.75.186.0/24 | AS29355 |
| Oct 14, 10:16 UTC | 60 | 2.75.153.0/24 | AS29355 |
| Oct 14, 10:16 UTC | 56 | 66.234.80.0/20 | AS397048 |
| Oct 14, 10:16 UTC | 56 | 129.208.0.0/16 | AS25019 |
| Oct 14, 10:16 UTC | 56 | 47.87.6.0/24 | AS45102 |
| Oct 14, 10:16 UTC | 56 | 45.67.205.0/24 | AS207364 |
| Oct 14, 10:16 UTC | 56 | 95.170.224.0/22 | AS16006 |
| Oct 14, 10:16 UTC | 56 | 37.57.130.0/24 | AS13188 |
| Oct 14, 10:16 UTC | 56 | 216.224.236.0/24 | AS39948 |
| Oct 14, 10:16 UTC | 58 | 37.236.9.0/24 | AS203214 |
| Oct 14, 10:16 UTC | 56 | 44.31.176.0/24 | AS202224 |
| Oct 14, 10:16 UTC | 56 | 216.224.225.0/24 | AS39948 |
| Oct 14, 10:16 UTC | 56 | 85.8.131.0/24 | AS39563 |
| Oct 14, 10:16 UTC | 56 | 46.219.120.0/24 | AS31148 |
| Oct 14, 10:16 UTC | 56 | 74.2.48.0/22 | AS137830 |
| Oct 14, 10:16 UTC | 56 | 74.209.152.0/24 | AS39948 |
| Oct 14, 10:16 UTC | 56 | 80.64.80.0/24 | AS24812 |
| Oct 14, 10:16 UTC | 56 | 198.99.230.0/24 | AS200343 |
| Oct 14, 10:16 UTC | 56 | 109.197.34.0/24 | AS25070 |
| Oct 14, 10:16 UTC | 56 | 80.245.192.0/20 | AS21360 |
| Oct 14, 10:16 UTC | 56 | 45.223.204.0/24 | AS19551 |
| Oct 14, 10:16 UTC | 56 | 83.98.136.0/23 | AS30870 |
| Oct 14, 10:16 UTC | 56 | 89.36.193.0/24 | AS43938 |
| Oct 14, 10:16 UTC | 56 | 64.40.169.0/24 | AS15035 |
| Oct 14, 10:16 UTC | 58 | 2.75.56.0/21 | AS29355 |
| Oct 14, 10:16 UTC | 56 | 128.0.53.0/24 | AS60993 |
| Oct 14, 10:16 UTC | 56 | 93.157.56.0/24 | AS57580 |
| Oct 14, 10:16 UTC | 56 | 37.18.128.0/22 | AS49354 |
| Oct 14, 10:16 UTC | 56 | 109.201.226.0/24 | AS25229 |
| Oct 14, 10:16 UTC | 56 | 91.198.160.0/24 | AS43807 |
| Oct 14, 10:16 UTC | 56 | 88.158.42.0/23 | AS15471 |
| Oct 14, 10:16 UTC | 56 | 5.255.96.0/24 | AS60404 |
| Oct 14, 10:16 UTC | 56 | 77.90.136.0/24 | AS42821 |
| Oct 14, 10:16 UTC | 56 | 95.47.253.0/24 | AS49168 |
| Oct 14, 10:16 UTC | 56 | 88.158.44.0/23 | AS15471 |
| Oct 14, 10:16 UTC | 56 | 45.4.55.0/24 | AS266040 |
| Oct 14, 10:16 UTC | 56 | 145.250.219.0/24 | AS213196 |
| Oct 14, 10:16 UTC | 56 | 77.90.130.0/24 | AS42821 |
| Oct 14, 10:16 UTC | 56 | 88.158.54.0/24 | AS15471 |
| Oct 14, 10:16 UTC | 56 | 9.170.66.0/23 | AS14593 |
| Oct 14, 10:16 UTC | 56 | 85.120.64.0/24 | AS34416 |
| Oct 14, 10:16 UTC | 60 | 2.75.15.0/24 | AS29355 |
| Oct 14, 10:16 UTC | 60 | 2.75.20.0/23 | AS29355 |
| Oct 14, 10:16 UTC | 56 | 109.251.26.0/24 | AS31148 |
| Oct 14, 10:16 UTC | 56 | 199.87.184.0/23 | AS32524 |
| Oct 14, 10:16 UTC | 56 | 46.8.169.0/24 | AS201746 |
| Oct 14, 10:16 UTC | 56 | 31.12.0.0/21 | AS29287 |
| Oct 14, 10:16 UTC | 56 | 3.173.18.0/24 | AS16509 |
| Oct 14, 10:16 UTC | 58 | 37.239.94.0/23 | AS203214 |
| Oct 14, 10:16 UTC | 56 | 77.245.32.0/20 | AS42777 |
| Oct 14, 10:16 UTC | 60 | 2.75.86.0/24 | AS29355 |
| Oct 14, 10:16 UTC | 56 | 77.120.108.0/22 | AS35680 |
| Oct 14, 10:16 UTC | 56 | 5.104.171.0/24 | AS49699 |
| Oct 14, 10:16 UTC | 60 | 2.75.90.0/24 | AS29355 |
| Oct 14, 10:16 UTC | 56 | 47.87.7.0/24 | AS45102 |
| Oct 14, 10:16 UTC | 56 | 45.160.73.0/24 | AS266878 |
| Oct 14, 10:16 UTC | 58 | 37.238.115.0/24 | AS203214 |
| Oct 14, 10:16 UTC | 56 | 206.84.32.0/21 | AS265175 |
| Oct 14, 10:16 UTC | 56 | 93.190.144.0/21 | AS25409 |
| Oct 14, 10:16 UTC | 56 | 46.219.199.0/24 | AS31148 |
| Oct 14, 10:16 UTC | 60 | 2.75.143.0/24 | AS29355 |
| Oct 14, 10:16 UTC | 58 | 102.218.153.0/24 | AS328925 |
| Oct 14, 10:16 UTC | 56 | 89.200.243.0/24 | AS60090 |
| Oct 14, 10:16 UTC | 56 | 194.154.27.0/24 | AS219399 |
| Oct 14, 10:16 UTC | 56 | 38.9.11.0/24 | AS207645 |
| Oct 14, 10:16 UTC | 56 | 37.57.105.0/24 | AS13188 |
| Oct 14, 10:16 UTC | 56 | 109.232.136.0/21 | AS196865 |
| Oct 14, 10:16 UTC | 56 | 24.239.166.0/24 | AS55256 |
| Oct 14, 10:16 UTC | 56 | 141.98.224.0/24 | AS209571 |
| Oct 14, 10:16 UTC | 60 | 2.75.192.0/24 | AS29355 |
| Oct 14, 10:16 UTC | 58 | 37.236.223.0/24 | AS203214 |
| Oct 14, 10:16 UTC | 56 | 38.156.102.0/23 | AS263793 |
| Oct 14, 10:16 UTC | 56 | 46.219.95.0/24 | AS31148 |
| Oct 14, 10:16 UTC | 56 | 37.57.27.0/24 | AS13188 |
| Oct 14, 10:16 UTC | 60 | 2.75.208.0/24 | AS29355 |
| Oct 14, 10:16 UTC | 56 | 109.251.55.0/24 | AS31148 |
| Oct 14, 10:16 UTC | 56 | 88.158.88.0/23 | AS15471 |
| Oct 14, 10:16 UTC | 56 | 91.214.56.0/22 | AS47586 |
| Oct 14, 10:16 UTC | 56 | 94.97.3.0/24 | AS25019 |
| Oct 14, 10:16 UTC | 56 | 77.238.180.0/24 | AS203070 |
| Oct 14, 10:16 UTC | 56 | 102.205.192.0/24 | AS329550 |
| Oct 14, 10:16 UTC | 56 | 5.182.180.0/24 | AS16370 |
| Oct 14, 10:16 UTC | 56 | 91.204.64.0/22 | AS47371 |
| Oct 14, 10:16 UTC | 56 | 5.22.167.0/24 | AS21215 |
| Oct 14, 10:16 UTC | 56 | 9.170.224.0/23 | AS14593 |
| Oct 14, 10:16 UTC | 60 | 2.75.220.0/24 | AS29355 |
| Oct 14, 10:16 UTC | 56 | 46.219.197.0/24 | AS31148 |
| Oct 14, 10:16 UTC | 56 | 179.43.90.0/24 | AS263185 |
| Oct 14, 10:16 UTC | 56 | 37.120.157.0/24 | AS9009 |
| Oct 14, 10:16 UTC | 56 | 91.221.144.0/23 | AS197459 |
| Oct 14, 10:16 UTC | 60 | 2.75.84.0/24 | AS29355 |
| Oct 14, 10:16 UTC | 56 | 143.105.30.0/23 | AS14593 |
| Oct 14, 10:16 UTC | 60 | 2.75.92.0/24 | AS29355 |
| Oct 14, 10:16 UTC | 56 | 46.219.127.0/24 | AS31148 |
| Oct 14, 10:16 UTC | 56 | 91.211.252.0/22 | AS31129 |
| Oct 14, 10:16 UTC | 56 | 45.82.8.0/22 | AS35352 |
| Oct 14, 10:16 UTC | 56 | 74.209.155.0/24 | AS39948 |
| Oct 14, 10:16 UTC | 58 | 2.75.88.0/21 | AS29355 |
| Oct 14, 10:16 UTC | 60 | 2.75.17.0/24 | AS29355 |
| Oct 14, 10:16 UTC | 56 | 135.129.8.0/24 | AS14593 |
| Oct 14, 10:16 UTC | 56 | 178.151.64.0/24 | AS13188 |
| Oct 14, 10:16 UTC | 60 | 2.75.120.0/23 | AS29355 |
Frequently Asked Questions
What is a BGP AS-path anomaly?
An AS-path anomaly is an unusual or implausible sequence of Autonomous Systems in a route advertisement whose unique-AS-path length (prepends collapsed) deviates sharply from the recent 36-hour median for that prefix — an unexpected transit AS, a loop, or a sudden detour. It can reveal a route leak or a path-prepending mistake.
Where does this data come from?
Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.
How often is the AS-path anomaly feed updated?
The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-10-14 10:40 UTC.
How do I subscribe to AS-path anomaly events?
Subscribe to the Atom feed at /pulse/bgp/aspath.atom or poll the JSON endpoint at /api/pulse/bgp/aspath.