Pulse — AS-path anomaly
Unique-AS-path lengths (prepends collapsed) that deviate sharply from the recent 36-hour median for that prefix.
What is AS-path anomaly?
An AS-path anomaly is an unusual or implausible sequence of Autonomous Systems in a route advertisement whose unique-AS-path length (prepends collapsed) deviates sharply from the recent 36-hour median for that prefix — an unexpected transit AS, a loop, or a sudden detour. It can reveal a route leak or a path-prepending mistake.
Geographic distribution
Flagged events
Showing 200 most recent of 954 · last 24h| When | Severity | Prefix | AS |
|---|---|---|---|
| Aug 29, 20:56 UTC | 56 | 84.245.88.0/23 | AS206198 |
| Aug 29, 20:56 UTC | 56 | 66.6.59.0/24 | AS213382 |
| Aug 29, 20:56 UTC | 56 | 185.224.200.0/22 | AS205243 |
| Aug 29, 20:56 UTC | 56 | 185.92.203.0/24 | AS200849 |
| Aug 29, 20:56 UTC | 56 | 159.253.232.0/21 | AS50698 |
| Aug 29, 20:56 UTC | 56 | 194.180.249.0/24 | AS62028 |
| Aug 29, 20:56 UTC | 56 | 45.146.129.0/24 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 185.6.144.0/24 | AS44645 |
| Aug 29, 20:56 UTC | 56 | 151.252.45.0/24 | AS25291 |
| Aug 29, 20:56 UTC | 56 | 91.210.131.0/24 | AS44279 |
| Aug 29, 20:56 UTC | 56 | 45.130.209.0/24 | AS34903 |
| Aug 29, 20:56 UTC | 56 | 194.48.184.0/22 | AS8245 |
| Aug 29, 20:56 UTC | 56 | 157.25.57.0/24 | AS206770 |
| Aug 29, 20:56 UTC | 56 | 185.56.107.0/24 | AS43902 |
| Aug 29, 20:56 UTC | 56 | 82.177.202.0/23 | AS206442 |
| Aug 29, 20:56 UTC | 56 | 185.53.180.0/22 | AS34767 |
| Aug 29, 20:56 UTC | 56 | 185.4.112.0/22 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 185.184.192.0/22 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 179.125.20.0/24 | AS265066 |
| Aug 29, 20:56 UTC | 56 | 46.220.0.0/16 | AS25255 |
| Aug 29, 20:56 UTC | 56 | 91.123.100.0/24 | AS8302 |
| Aug 29, 20:56 UTC | 56 | 46.28.234.0/24 | AS207728 |
| Aug 29, 20:56 UTC | 56 | 170.79.98.0/24 | AS265066 |
| Aug 29, 20:56 UTC | 56 | 168.121.202.0/24 | AS265066 |
| Aug 29, 20:56 UTC | 56 | 91.220.237.0/24 | AS212537 |
| Aug 29, 20:56 UTC | 56 | 149.57.229.0/24 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 185.99.80.0/22 | AS15702 |
| Aug 29, 20:56 UTC | 56 | 138.226.220.0/24 | AS207728 |
| Aug 29, 20:56 UTC | 56 | 195.136.158.0/23 | AS199260 |
| Aug 29, 20:56 UTC | 56 | 194.35.236.0/23 | AS49007 |
| Aug 29, 20:56 UTC | 56 | 45.82.64.0/22 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 109.68.225.0/24 | AS25291 |
| Aug 29, 20:56 UTC | 56 | 193.46.101.0/24 | AS28889 |
| Aug 29, 20:56 UTC | 56 | 195.136.12.0/23 | AS199260 |
| Aug 29, 20:56 UTC | 56 | 193.105.20.0/24 | AS50423 |
| Aug 29, 20:56 UTC | 56 | 109.94.248.0/24 | AS50086 |
| Aug 29, 20:56 UTC | 56 | 185.21.60.0/22 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 185.215.200.0/22 | AS205243 |
| Aug 29, 20:56 UTC | 56 | 185.204.52.0/24 | AS207728 |
| Aug 29, 20:56 UTC | 56 | 185.100.232.0/22 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 212.236.32.0/20 | AS8245 |
| Aug 29, 20:56 UTC | 56 | 91.217.228.0/24 | AS24732 |
| Aug 29, 20:56 UTC | 56 | 217.79.146.0/23 | AS42923 |
| Aug 29, 20:56 UTC | 56 | 193.43.12.0/23 | AS204295 |
| Aug 29, 20:56 UTC | 56 | 45.3.56.0/24 | AS25255 |
| Aug 29, 20:56 UTC | 56 | 82.177.204.0/24 | AS50625 |
| Aug 29, 20:56 UTC | 56 | 45.130.210.0/24 | AS34903 |
| Aug 29, 20:56 UTC | 56 | 195.69.209.0/24 | AS25070 |
| Aug 29, 20:56 UTC | 56 | 151.96.0.0/16 | AS8217 |
| Aug 29, 20:56 UTC | 56 | 81.15.145.0/24 | AS205034 |
| Aug 29, 20:56 UTC | 56 | 195.167.149.0/24 | AS206838 |
| Aug 29, 20:56 UTC | 56 | 109.68.229.0/24 | AS25291 |
| Aug 29, 20:56 UTC | 56 | 176.10.15.0/24 | AS205975 |
| Aug 29, 20:56 UTC | 56 | 37.0.113.0/24 | AS10780 |
| Aug 29, 20:56 UTC | 56 | 185.150.34.0/24 | AS44645 |
| Aug 29, 20:56 UTC | 56 | 185.123.108.0/22 | AS203813 |
| Aug 29, 20:56 UTC | 56 | 185.13.144.0/22 | AS49633 |
| Aug 29, 20:56 UTC | 56 | 185.92.202.0/24 | AS200849 |
| Aug 29, 20:56 UTC | 56 | 185.162.11.0/24 | AS207728 |
| Aug 29, 20:56 UTC | 56 | 81.15.155.0/24 | AS211388 |
| Aug 29, 20:56 UTC | 56 | 212.236.48.0/21 | AS8245 |
| Aug 29, 20:56 UTC | 56 | 185.132.132.0/22 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 109.94.250.0/24 | AS50086 |
| Aug 29, 20:56 UTC | 56 | 91.210.130.0/24 | AS44279 |
| Aug 29, 20:56 UTC | 56 | 195.136.76.0/24 | AS202403 |
| Aug 29, 20:56 UTC | 56 | 185.21.63.0/24 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 88.220.138.0/24 | AS210587 |
| Aug 29, 20:56 UTC | 56 | 45.14.132.0/22 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 109.94.241.0/24 | AS50086 |
| Aug 29, 20:56 UTC | 56 | 185.110.136.0/23 | AS210947 |
| Aug 29, 20:56 UTC | 56 | 91.216.202.0/24 | AS197135 |
| Aug 29, 20:56 UTC | 56 | 195.167.148.0/24 | AS206838 |
| Aug 29, 20:56 UTC | 56 | 168.121.200.0/24 | AS265066 |
| Aug 29, 20:56 UTC | 56 | 185.74.0.0/22 | AS8596 |
| Aug 29, 20:56 UTC | 56 | 185.105.192.0/22 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 185.204.55.0/24 | AS207728 |
| Aug 29, 20:56 UTC | 56 | 46.231.152.0/21 | AS34999 |
| Aug 29, 20:56 UTC | 56 | 185.183.32.0/22 | AS49981 |
| Aug 29, 20:56 UTC | 58 | 185.121.40.0/22 | AS35369 |
| Aug 29, 20:56 UTC | 56 | 195.136.123.0/24 | AS213530 |
| Aug 29, 20:56 UTC | 56 | 2.59.168.0/22 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 88.220.82.0/23 | AS201904 |
| Aug 29, 20:56 UTC | 56 | 200.189.48.0/21 | AS14204 |
| Aug 29, 20:56 UTC | 56 | 185.182.194.0/24 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 185.180.220.0/22 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 5.252.152.0/24 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 195.234.164.0/24 | AS204953 |
| Aug 29, 20:56 UTC | 56 | 82.160.29.0/24 | AS61256 |
| Aug 29, 20:56 UTC | 56 | 212.236.248.0/22 | AS8245 |
| Aug 29, 20:56 UTC | 56 | 185.119.160.0/22 | AS199205 |
| Aug 29, 20:56 UTC | 56 | 88.220.71.0/24 | AS199694 |
| Aug 29, 20:56 UTC | 56 | 45.130.208.0/24 | AS34903 |
| Aug 29, 20:56 UTC | 56 | 31.210.172.0/24 | AS207728 |
| Aug 29, 20:56 UTC | 56 | 104.238.26.0/24 | AS205380 |
| Aug 29, 20:56 UTC | 56 | 92.63.32.0/20 | AS49633 |
| Aug 29, 20:56 UTC | 56 | 195.26.198.0/24 | AS8245 |
| Aug 29, 20:56 UTC | 56 | 45.145.52.0/24 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 185.182.192.0/24 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 69.41.54.0/24 | AS19197 |
| Aug 29, 20:56 UTC | 56 | 185.11.217.0/24 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 82.177.128.0/24 | AS206093 |
| Aug 29, 20:56 UTC | 56 | 185.244.138.0/24 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 179.125.23.0/24 | AS265066 |
| Aug 29, 20:56 UTC | 56 | 185.18.132.0/22 | AS199390 |
| Aug 29, 20:56 UTC | 56 | 109.94.245.0/24 | AS50086 |
| Aug 29, 20:56 UTC | 56 | 81.15.237.0/24 | AS203279 |
| Aug 29, 20:56 UTC | 56 | 69.41.56.0/24 | AS19197 |
| Aug 29, 20:56 UTC | 56 | 46.175.56.0/21 | AS25504 |
| Aug 29, 20:56 UTC | 56 | 31.10.5.0/24 | AS207728 |
| Aug 29, 20:56 UTC | 56 | 212.236.0.0/19 | AS8245 |
| Aug 29, 20:56 UTC | 56 | 212.236.212.0/22 | AS8245 |
| Aug 29, 20:56 UTC | 56 | 185.132.176.0/22 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 85.248.235.0/24 | AS34443 |
| Aug 29, 20:56 UTC | 56 | 91.235.16.0/22 | AS204295 |
| Aug 29, 20:56 UTC | 56 | 185.2.80.0/22 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 179.42.149.0/24 | AS265066 |
| Aug 29, 20:56 UTC | 56 | 195.150.192.0/22 | AS203890 |
| Aug 29, 20:56 UTC | 56 | 176.74.59.0/24 | AS25291 |
| Aug 29, 20:56 UTC | 56 | 185.41.94.0/23 | AS199953 |
| Aug 29, 20:56 UTC | 56 | 109.68.228.0/24 | AS25291 |
| Aug 29, 20:56 UTC | 56 | 192.162.44.0/22 | AS197682 |
| Aug 29, 20:56 UTC | 56 | 213.199.213.0/24 | AS25070 |
| Aug 29, 20:56 UTC | 56 | 185.92.200.0/24 | AS200849 |
| Aug 29, 20:56 UTC | 56 | 185.90.232.0/22 | AS25504 |
| Aug 29, 20:56 UTC | 56 | 163.5.214.0/24 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 145.237.221.0/24 | AS34339 |
| Aug 29, 20:56 UTC | 56 | 45.130.201.0/24 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 81.15.191.0/24 | AS204301 |
| Aug 29, 20:56 UTC | 56 | 77.247.81.0/24 | AS25291 |
| Aug 29, 20:56 UTC | 56 | 147.90.59.0/24 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 185.172.108.0/24 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 193.46.102.0/23 | AS28889 |
| Aug 29, 20:56 UTC | 56 | 185.150.32.0/24 | AS44645 |
| Aug 29, 20:56 UTC | 56 | 195.136.108.0/24 | AS215903 |
| Aug 29, 20:56 UTC | 56 | 37.202.210.0/24 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 82.177.195.0/24 | AS197142 |
| Aug 29, 20:56 UTC | 56 | 80.241.128.0/21 | AS16296 |
| Aug 29, 20:56 UTC | 56 | 185.99.99.0/24 | AS49981 |
| Aug 29, 20:56 UTC | 58 | 185.168.100.0/22 | AS35369 |
| Aug 29, 20:56 UTC | 56 | 185.182.192.0/22 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 185.165.240.0/22 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 185.162.8.0/24 | AS207728 |
| Aug 29, 20:56 UTC | 56 | 192.108.125.0/24 | AS34521 |
| Aug 29, 20:56 UTC | 56 | 185.193.65.0/24 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 185.92.201.0/24 | AS200849 |
| Aug 29, 20:56 UTC | 56 | 45.130.208.0/22 | AS34903 |
| Aug 29, 20:56 UTC | 56 | 104.192.42.0/24 | AS207728 |
| Aug 29, 20:56 UTC | 56 | 149.57.36.0/24 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 179.42.148.0/24 | AS265066 |
| Aug 29, 20:56 UTC | 56 | 81.15.246.0/24 | AS25070 |
| Aug 29, 20:56 UTC | 56 | 80.252.32.0/20 | AS15702 |
| Aug 29, 20:56 UTC | 56 | 195.182.9.0/24 | AS39171 |
| Aug 29, 20:56 UTC | 56 | 45.150.156.0/22 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 185.116.76.0/22 | AS50698 |
| Aug 29, 20:56 UTC | 56 | 80.75.240.0/20 | AS34767 |
| Aug 29, 20:56 UTC | 56 | 176.119.217.0/24 | AS215385 |
| Aug 29, 20:56 UTC | 56 | 195.242.184.0/24 | AS8245 |
| Aug 29, 20:56 UTC | 56 | 91.231.92.0/24 | AS47672 |
| Aug 29, 20:56 UTC | 56 | 46.148.132.0/22 | AS44056 |
| Aug 29, 20:56 UTC | 56 | 149.57.4.0/24 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 5.254.184.0/21 | AS199205 |
| Aug 29, 20:56 UTC | 56 | 185.177.124.0/22 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 31.58.208.0/24 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 88.199.162.0/24 | AS42923 |
| Aug 29, 20:56 UTC | 58 | 195.66.92.0/24 | AS39460 |
| Aug 29, 20:56 UTC | 56 | 217.79.144.0/23 | AS42923 |
| Aug 29, 20:56 UTC | 56 | 194.58.196.0/24 | AS8674 |
| Aug 29, 20:56 UTC | 56 | 45.93.23.0/24 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 88.220.55.0/24 | AS213530 |
| Aug 29, 20:56 UTC | 56 | 195.136.79.0/24 | AS39437 |
| Aug 29, 20:56 UTC | 56 | 5.172.190.0/23 | AS207012 |
| Aug 29, 20:56 UTC | 56 | 88.220.72.0/24 | AS199823 |
| Aug 29, 20:56 UTC | 56 | 179.42.151.0/24 | AS265066 |
| Aug 29, 20:56 UTC | 56 | 212.89.160.0/19 | AS49864 |
| Aug 29, 20:56 UTC | 56 | 185.255.252.0/22 | AS199390 |
| Aug 29, 20:56 UTC | 56 | 192.76.243.0/24 | AS35052 |
| Aug 29, 20:56 UTC | 58 | 185.197.181.0/24 | AS35369 |
| Aug 29, 20:56 UTC | 56 | 149.57.26.0/24 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 91.123.99.0/24 | AS8302 |
| Aug 29, 20:56 UTC | 56 | 185.173.160.0/22 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 185.110.138.0/23 | AS210947 |
| Aug 29, 20:56 UTC | 56 | 195.136.78.0/24 | AS199260 |
| Aug 29, 20:56 UTC | 56 | 91.239.205.0/24 | AS198835 |
| Aug 29, 20:56 UTC | 56 | 195.26.192.0/19 | AS8245 |
| Aug 29, 20:56 UTC | 56 | 158.58.144.0/21 | AS25504 |
| Aug 29, 20:56 UTC | 56 | 195.238.168.0/22 | AS56709 |
| Aug 29, 20:56 UTC | 56 | 146.19.188.0/24 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 145.237.222.0/24 | AS34339 |
| Aug 29, 20:56 UTC | 56 | 185.41.92.0/24 | AS199953 |
| Aug 29, 20:56 UTC | 56 | 91.231.178.0/24 | AS52142 |
| Aug 29, 20:56 UTC | 56 | 109.68.224.0/24 | AS25291 |
| Aug 29, 20:56 UTC | 56 | 185.150.33.0/24 | AS44645 |
| Aug 29, 20:56 UTC | 56 | 149.57.152.0/24 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 109.202.64.0/19 | AS50698 |
| Aug 29, 20:56 UTC | 56 | 46.151.160.0/21 | AS25504 |
| Aug 29, 20:56 UTC | 56 | 31.210.173.0/24 | AS207728 |
| Aug 29, 20:56 UTC | 58 | 185.242.177.0/24 | AS35369 |
| Aug 29, 20:56 UTC | 56 | 185.185.48.0/22 | AS49981 |
| Aug 29, 20:56 UTC | 56 | 85.190.245.0/24 | AS41455 |
| Aug 29, 20:56 UTC | 56 | 45.146.7.0/24 | AS49981 |
Frequently Asked Questions
What is a BGP AS-path anomaly?
An AS-path anomaly is an unusual or implausible sequence of Autonomous Systems in a route advertisement whose unique-AS-path length (prepends collapsed) deviates sharply from the recent 36-hour median for that prefix — an unexpected transit AS, a loop, or a sudden detour. It can reveal a route leak or a path-prepending mistake.
Where does this data come from?
Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.
How often is the AS-path anomaly feed updated?
The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-08-29 21:55 UTC.
How do I subscribe to AS-path anomaly events?
Subscribe to the Atom feed at /pulse/bgp/aspath.atom or poll the JSON endpoint at /api/pulse/bgp/aspath.