Pulse — AS-path anomaly
Unique-AS-path lengths (prepends collapsed) that deviate sharply from the recent 36-hour median for that prefix.
What is AS-path anomaly?
An AS-path anomaly is an unusual or implausible sequence of Autonomous Systems in a route advertisement whose unique-AS-path length (prepends collapsed) deviates sharply from the recent 36-hour median for that prefix — an unexpected transit AS, a loop, or a sudden detour. It can reveal a route leak or a path-prepending mistake.
Geographic distribution
Flagged events
Showing 200 most recent of 5,105 · last 24h| When | Severity | Prefix | AS |
|---|---|---|---|
| Oct 18, 01:17 UTC | 56 | 23.90.186.0/23 | AS21859 |
| Oct 18, 00:16 UTC | 56 | 200.47.106.0/23 | AS7908 |
| Oct 18, 00:16 UTC | 56 | 200.47.126.0/24 | AS7908 |
| Oct 18, 00:16 UTC | 56 | 200.47.162.0/24 | AS7908 |
| Oct 18, 00:16 UTC | 56 | 38.253.94.0/24 | AS174 |
| Oct 18, 00:16 UTC | 56 | 200.47.90.0/23 | AS7908 |
| Oct 18, 00:16 UTC | 56 | 200.47.167.0/24 | AS7908 |
| Oct 18, 00:16 UTC | 56 | 38.253.91.0/24 | AS174 |
| Oct 18, 00:16 UTC | 56 | 200.47.64.0/21 | AS7908 |
| Oct 18, 00:16 UTC | 56 | 200.47.116.0/23 | AS7908 |
| Oct 18, 00:16 UTC | 56 | 200.47.165.0/24 | AS7908 |
| Oct 18, 00:16 UTC | 58 | 177.154.115.0/24 | AS262959 |
| Oct 18, 00:16 UTC | 56 | 103.231.240.0/24 | AS133498 |
| Oct 18, 00:16 UTC | 58 | 177.154.112.0/24 | AS262959 |
| Oct 18, 00:16 UTC | 56 | 200.47.56.0/21 | AS7908 |
| Oct 18, 00:16 UTC | 56 | 200.47.62.0/24 | AS7908 |
| Oct 18, 00:16 UTC | 56 | 200.47.105.0/24 | AS7908 |
| Oct 18, 00:16 UTC | 56 | 200.47.87.0/24 | AS7908 |
| Oct 18, 00:16 UTC | 56 | 200.47.248.0/21 | AS7908 |
| Oct 18, 00:16 UTC | 56 | 170.83.25.0/24 | AS266451 |
| Oct 18, 00:16 UTC | 56 | 200.47.192.0/21 | AS7908 |
| Oct 18, 00:16 UTC | 56 | 200.47.50.0/24 | AS7908 |
| Oct 18, 00:16 UTC | 56 | 200.47.168.0/24 | AS7908 |
| Oct 18, 00:16 UTC | 56 | 38.253.89.0/24 | AS174 |
| Oct 18, 00:16 UTC | 56 | 200.47.240.0/21 | AS7908 |
| Oct 18, 00:16 UTC | 56 | 200.47.93.0/24 | AS7908 |
| Oct 18, 00:16 UTC | 56 | 38.253.93.0/24 | AS174 |
| Oct 18, 00:16 UTC | 56 | 200.47.148.0/24 | AS7908 |
| Oct 18, 00:16 UTC | 56 | 38.253.90.0/24 | AS174 |
| Oct 18, 00:16 UTC | 56 | 200.47.80.0/22 | AS7908 |
| Oct 18, 00:16 UTC | 56 | 200.47.100.0/22 | AS7908 |
| Oct 18, 00:16 UTC | 58 | 168.196.199.0/24 | AS270980 |
| Oct 18, 00:16 UTC | 56 | 200.47.196.0/24 | AS7908 |
| Oct 18, 00:16 UTC | 56 | 200.47.74.0/24 | AS7908 |
| Oct 18, 00:16 UTC | 56 | 200.47.163.0/24 | AS7908 |
| Oct 18, 00:16 UTC | 58 | 168.196.196.0/22 | AS270980 |
| Oct 18, 00:16 UTC | 56 | 103.231.242.0/24 | AS133498 |
| Oct 18, 00:16 UTC | 58 | 200.106.210.0/24 | AS271248 |
| Oct 18, 00:16 UTC | 56 | 200.47.104.0/24 | AS7908 |
| Oct 18, 00:16 UTC | 56 | 200.47.161.0/24 | AS7908 |
| Oct 18, 00:16 UTC | 56 | 200.47.122.0/23 | AS7908 |
| Oct 18, 00:16 UTC | 56 | 202.92.130.0/24 | AS23862 |
| Oct 18, 00:16 UTC | 56 | 200.47.232.0/21 | AS7908 |
| Oct 18, 00:16 UTC | 56 | 200.47.92.0/24 | AS7908 |
| Oct 18, 00:16 UTC | 56 | 200.47.49.0/24 | AS7908 |
| Oct 18, 00:16 UTC | 56 | 200.47.50.0/23 | AS7908 |
| Oct 18, 00:16 UTC | 56 | 38.253.92.0/24 | AS174 |
| Oct 18, 00:16 UTC | 56 | 202.92.140.0/24 | AS135162 |
| Oct 18, 00:16 UTC | 56 | 200.47.200.0/21 | AS7908 |
| Oct 18, 00:16 UTC | 56 | 200.47.109.0/24 | AS7908 |
| Oct 18, 00:16 UTC | 56 | 102.135.181.0/24 | AS16509 |
| Oct 18, 00:16 UTC | 56 | 200.47.86.0/24 | AS7908 |
| Oct 18, 00:16 UTC | 56 | 200.47.119.0/24 | AS7908 |
| Oct 17, 23:16 UTC | 56 | 151.241.144.0/24 | AS209630 |
| Oct 17, 23:16 UTC | 56 | 193.3.20.0/24 | AS215762 |
| Oct 17, 23:16 UTC | 56 | 81.31.195.0/24 | AS208220 |
| Oct 17, 23:16 UTC | 58 | 177.177.224.0/24 | AS60326 |
| Oct 17, 23:16 UTC | 56 | 91.204.16.0/22 | AS39775 |
| Oct 17, 23:16 UTC | 56 | 5.253.86.0/24 | AS213438 |
| Oct 17, 23:16 UTC | 56 | 81.90.208.0/20 | AS39775 |
| Oct 17, 23:16 UTC | 56 | 92.60.77.0/24 | AS214557 |
| Oct 17, 23:16 UTC | 56 | 181.215.186.0/24 | AS209630 |
| Oct 17, 23:16 UTC | 56 | 181.215.41.0/24 | AS209630 |
| Oct 17, 23:16 UTC | 56 | 217.60.101.0/24 | AS208220 |
| Oct 17, 23:16 UTC | 58 | 192.245.88.0/24 | AS393216 |
| Oct 17, 23:16 UTC | 56 | 87.121.84.0/24 | AS197170 |
| Oct 17, 23:16 UTC | 58 | 177.177.225.0/24 | AS60326 |
| Oct 17, 23:16 UTC | 56 | 46.23.108.0/24 | AS215762 |
| Oct 17, 23:16 UTC | 56 | 193.142.146.0/24 | AS213438 |
| Oct 17, 23:16 UTC | 56 | 192.109.138.0/24 | AS213438 |
| Oct 17, 23:16 UTC | 56 | 141.11.69.0/24 | AS215097 |
| Oct 17, 23:16 UTC | 56 | 45.129.230.0/23 | AS213438 |
| Oct 17, 23:16 UTC | 56 | 151.243.11.0/24 | AS209630 |
| Oct 17, 23:16 UTC | 56 | 178.215.227.0/24 | AS211443 |
| Oct 17, 23:16 UTC | 56 | 185.148.76.0/24 | AS204818 |
| Oct 17, 23:16 UTC | 56 | 193.142.147.0/24 | AS213438 |
| Oct 17, 23:16 UTC | 56 | 93.123.118.0/24 | AS209630 |
| Oct 17, 23:16 UTC | 56 | 81.31.194.0/24 | AS208220 |
| Oct 17, 23:16 UTC | 56 | 181.214.125.0/24 | AS209630 |
| Oct 17, 23:16 UTC | 56 | 93.152.233.0/24 | AS211443 |
| Oct 17, 23:16 UTC | 58 | 138.249.75.0/24 | AS44559 |
| Oct 17, 23:16 UTC | 56 | 45.134.225.0/24 | AS213438 |
| Oct 17, 23:16 UTC | 56 | 79.124.8.0/24 | AS213438 |
| Oct 17, 23:16 UTC | 56 | 93.152.219.0/24 | AS213438 |
| Oct 17, 23:16 UTC | 56 | 38.224.202.0/24 | AS174 |
| Oct 17, 23:16 UTC | 56 | 196.32.227.0/24 | AS37210 |
| Oct 17, 23:16 UTC | 56 | 185.196.220.0/24 | AS213438 |
| Oct 17, 23:16 UTC | 56 | 31.58.249.0/24 | AS213438 |
| Oct 17, 23:16 UTC | 60 | 194.126.38.0/24 | AS25122 |
| Oct 17, 23:16 UTC | 56 | 92.60.79.0/24 | AS215762 |
| Oct 17, 23:16 UTC | 56 | 31.56.110.0/24 | AS213438 |
| Oct 17, 23:16 UTC | 58 | 208.73.214.0/24 | AS60326 |
| Oct 17, 23:16 UTC | 56 | 5.253.84.0/24 | AS213438 |
| Oct 17, 23:16 UTC | 56 | 109.205.214.0/24 | AS203363 |
| Oct 17, 23:16 UTC | 56 | 94.156.167.0/24 | AS208220 |
| Oct 17, 23:16 UTC | 56 | 194.87.14.0/24 | AS201409 |
| Oct 17, 23:16 UTC | 58 | 45.178.169.0/24 | AS269041 |
| Oct 17, 23:16 UTC | 56 | 193.142.59.0/24 | AS201409 |
| Oct 17, 23:16 UTC | 56 | 185.190.26.0/24 | AS207616 |
| Oct 17, 23:16 UTC | 60 | 45.125.228.0/24 | AS133880 |
| Oct 17, 23:16 UTC | 56 | 217.60.79.0/24 | AS213438 |
| Oct 17, 23:16 UTC | 58 | 45.178.168.0/24 | AS269041 |
| Oct 17, 23:16 UTC | 56 | 185.190.0.0/22 | AS39775 |
| Oct 17, 23:16 UTC | 58 | 45.178.170.0/23 | AS273438 |
| Oct 17, 23:16 UTC | 56 | 78.142.18.0/24 | AS213438 |
| Oct 17, 23:16 UTC | 56 | 78.41.139.0/24 | AS201409 |
| Oct 17, 23:16 UTC | 56 | 62.192.32.0/19 | AS39775 |
| Oct 17, 23:16 UTC | 58 | 45.178.168.0/23 | AS269041 |
| Oct 17, 23:16 UTC | 56 | 91.92.41.0/24 | AS211443 |
| Oct 17, 23:16 UTC | 56 | 185.14.156.0/22 | AS3250 |
| Oct 17, 23:16 UTC | 56 | 87.120.127.0/24 | AS208220 |
| Oct 17, 23:16 UTC | 58 | 8.225.193.0/24 | AS46887 |
| Oct 17, 23:16 UTC | 56 | 50.118.225.0/24 | AS213438 |
| Oct 17, 23:16 UTC | 56 | 87.232.84.0/24 | AS214557 |
| Oct 17, 23:16 UTC | 56 | 38.224.195.0/24 | AS174 |
| Oct 17, 22:16 UTC | 56 | 189.142.80.0/21 | AS8151 |
| Oct 17, 22:16 UTC | 56 | 187.230.144.0/21 | AS8151 |
| Oct 17, 22:16 UTC | 56 | 95.27.68.0/23 | AS3216 |
| Oct 17, 22:16 UTC | 60 | 177.66.98.0/23 | AS262491 |
| Oct 17, 22:16 UTC | 58 | 170.238.72.0/24 | AS264496 |
| Oct 17, 22:16 UTC | 56 | 201.161.1.0/24 | AS32098 |
| Oct 17, 22:16 UTC | 56 | 104.23.170.0/24 | AS13335 |
| Oct 17, 22:16 UTC | 58 | 45.186.231.0/24 | AS269439 |
| Oct 17, 22:16 UTC | 56 | 13.227.199.0/24 | AS16509 |
| Oct 17, 22:16 UTC | 58 | 177.38.14.0/23 | AS262893 |
| Oct 17, 22:16 UTC | 56 | 45.58.112.0/24 | AS23470 |
| Oct 17, 22:16 UTC | 56 | 187.148.200.0/21 | AS8151 |
| Oct 17, 22:16 UTC | 58 | 186.211.106.0/24 | AS53062 |
| Oct 17, 22:16 UTC | 56 | 143.105.154.0/23 | AS14593 |
| Oct 17, 22:16 UTC | 56 | 153.67.148.0/23 | AS14593 |
| Oct 17, 22:16 UTC | 56 | 201.114.128.0/19 | AS8151 |
| Oct 17, 22:16 UTC | 58 | 143.255.207.0/24 | AS264496 |
| Oct 17, 22:16 UTC | 56 | 99.239.128.0/18 | AS812 |
| Oct 17, 22:16 UTC | 56 | 187.136.8.0/21 | AS8151 |
| Oct 17, 22:16 UTC | 56 | 177.44.124.0/22 | AS28202 |
| Oct 17, 22:16 UTC | 56 | 72.136.112.0/23 | AS812 |
| Oct 17, 22:16 UTC | 56 | 131.255.59.0/24 | AS271253 |
| Oct 17, 22:16 UTC | 58 | 177.137.254.0/23 | AS267301 |
| Oct 17, 22:16 UTC | 56 | 189.131.2.0/24 | AS8151 |
| Oct 17, 22:16 UTC | 56 | 173.32.254.0/23 | AS812 |
| Oct 17, 22:16 UTC | 56 | 18.244.60.0/22 | AS16509 |
| Oct 17, 22:16 UTC | 56 | 213.111.136.0/23 | AS56630 |
| Oct 17, 22:16 UTC | 56 | 187.234.14.0/23 | AS8151 |
| Oct 17, 22:16 UTC | 58 | 177.38.8.0/24 | AS262893 |
| Oct 17, 22:16 UTC | 56 | 201.174.127.0/24 | AS32098 |
| Oct 17, 22:16 UTC | 56 | 3.168.138.0/24 | AS16509 |
| Oct 17, 22:16 UTC | 56 | 185.157.44.0/24 | AS9125 |
| Oct 17, 22:16 UTC | 56 | 88.148.31.0/24 | AS29119 |
| Oct 17, 22:16 UTC | 58 | 177.66.149.0/24 | AS52847 |
| Oct 17, 22:16 UTC | 56 | 201.161.50.0/24 | AS32098 |
| Oct 17, 22:16 UTC | 56 | 46.31.235.0/24 | AS16552 |
| Oct 17, 22:16 UTC | 56 | 200.66.108.0/24 | AS32098 |
| Oct 17, 22:16 UTC | 62 | 45.190.72.0/24 | AS269702 |
| Oct 17, 22:16 UTC | 56 | 213.221.64.0/18 | AS8426 |
| Oct 17, 22:16 UTC | 56 | 187.146.232.0/21 | AS8151 |
| Oct 17, 22:16 UTC | 56 | 23.199.45.0/24 | AS20940 |
| Oct 17, 22:16 UTC | 56 | 201.161.54.0/24 | AS32098 |
| Oct 17, 22:16 UTC | 58 | 201.33.146.0/24 | AS11993 |
| Oct 17, 22:16 UTC | 56 | 81.199.193.0/24 | AS12491 |
| Oct 17, 22:16 UTC | 56 | 187.230.204.0/23 | AS8151 |
| Oct 17, 22:16 UTC | 56 | 187.146.54.0/24 | AS8151 |
| Oct 17, 22:16 UTC | 56 | 18.244.64.0/21 | AS16509 |
| Oct 17, 22:16 UTC | 56 | 187.152.192.0/19 | AS8151 |
| Oct 17, 22:16 UTC | 56 | 168.205.241.0/24 | AS262494 |
| Oct 17, 22:16 UTC | 56 | 153.72.107.0/24 | AS31898 |
| Oct 17, 22:16 UTC | 56 | 189.233.212.0/24 | AS8151 |
| Oct 17, 22:16 UTC | 56 | 187.139.146.0/24 | AS8151 |
| Oct 17, 22:16 UTC | 56 | 23.209.69.0/24 | AS20940 |
| Oct 17, 22:16 UTC | 56 | 196.43.99.0/24 | AS37183 |
| Oct 17, 22:16 UTC | 56 | 200.66.109.0/24 | AS32098 |
| Oct 17, 22:16 UTC | 58 | 177.47.87.0/24 | AS262480 |
| Oct 17, 22:16 UTC | 58 | 177.66.148.0/24 | AS52847 |
| Oct 17, 22:16 UTC | 56 | 45.84.220.0/24 | AS201178 |
| Oct 17, 22:16 UTC | 56 | 169.159.170.0/24 | AS328471 |
| Oct 17, 22:16 UTC | 56 | 143.105.36.0/23 | AS14593 |
| Oct 17, 22:16 UTC | 56 | 201.161.35.0/24 | AS32098 |
| Oct 17, 22:16 UTC | 56 | 91.198.65.0/24 | AS29119 |
| Oct 17, 22:16 UTC | 56 | 5.42.255.0/24 | AS35753 |
| Oct 17, 22:16 UTC | 56 | 99.86.243.0/24 | AS16509 |
| Oct 17, 22:16 UTC | 58 | 45.224.32.0/22 | AS266924 |
| Oct 17, 22:16 UTC | 58 | 45.136.146.0/23 | AS208677 |
| Oct 17, 22:16 UTC | 58 | 168.121.112.0/22 | AS265311 |
| Oct 17, 22:16 UTC | 58 | 104.22.44.0/24 | AS13335 |
| Oct 17, 22:16 UTC | 56 | 194.226.214.0/23 | AS3267 |
| Oct 17, 22:16 UTC | 56 | 59.98.192.0/20 | AS9829 |
| Oct 17, 22:16 UTC | 56 | 152.65.232.0/24 | AS15169 |
| Oct 17, 22:16 UTC | 56 | 3.165.124.0/24 | AS16509 |
| Oct 17, 22:16 UTC | 56 | 201.96.116.0/24 | AS8151 |
| Oct 17, 22:16 UTC | 58 | 177.38.11.0/24 | AS262893 |
| Oct 17, 22:16 UTC | 56 | 201.99.37.0/24 | AS8151 |
| Oct 17, 22:16 UTC | 58 | 131.196.169.0/24 | AS265915 |
| Oct 17, 22:16 UTC | 56 | 102.176.93.0/24 | AS29614 |
| Oct 17, 22:16 UTC | 58 | 172.68.226.0/24 | AS13335 |
| Oct 17, 22:16 UTC | 56 | 201.172.138.0/24 | AS11888 |
| Oct 17, 22:16 UTC | 58 | 170.238.73.0/24 | AS264496 |
| Oct 17, 22:16 UTC | 56 | 131.255.58.0/24 | AS271253 |
| Oct 17, 22:16 UTC | 56 | 3.164.170.0/24 | AS16509 |
| Oct 17, 22:16 UTC | 56 | 185.119.43.0/24 | AS54994 |
| Oct 17, 22:16 UTC | 56 | 23.39.51.0/24 | AS20940 |
| Oct 17, 22:16 UTC | 56 | 173.35.6.0/23 | AS812 |
Frequently Asked Questions
What is a BGP AS-path anomaly?
An AS-path anomaly is an unusual or implausible sequence of Autonomous Systems in a route advertisement whose unique-AS-path length (prepends collapsed) deviates sharply from the recent 36-hour median for that prefix — an unexpected transit AS, a loop, or a sudden detour. It can reveal a route leak or a path-prepending mistake.
Where does this data come from?
Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.
How often is the AS-path anomaly feed updated?
The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-10-18 01:30 UTC.
How do I subscribe to AS-path anomaly events?
Subscribe to the Atom feed at /pulse/bgp/aspath.atom or poll the JSON endpoint at /api/pulse/bgp/aspath.