Pulse — AS-path anomaly
Unique-AS-path lengths (prepends collapsed) that deviate sharply from the recent 36-hour median for that prefix.
What is AS-path anomaly?
An AS-path anomaly is an unusual or implausible sequence of Autonomous Systems in a route advertisement whose unique-AS-path length (prepends collapsed) deviates sharply from the recent 36-hour median for that prefix — an unexpected transit AS, a loop, or a sudden detour. It can reveal a route leak or a path-prepending mistake.
Geographic distribution
Flagged events
Showing 200 most recent of 2,090 · last 24h| When | Severity | Prefix | AS |
|---|---|---|---|
| Aug 22, 05:31 UTC | 56 | 200.47.92.0/24 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 192.23.18.0/24 | AS7468 |
| Aug 22, 05:31 UTC | 62 | 103.20.219.0/24 | AS149968 |
| Aug 22, 05:31 UTC | 56 | 200.47.83.0/24 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.123.0/24 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.86.0/24 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.90.0/23 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 182.237.23.0/24 | AS55309 |
| Aug 22, 05:31 UTC | 56 | 200.47.74.0/24 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 202.37.133.0/24 | AS152687 |
| Aug 22, 05:31 UTC | 56 | 200.47.104.0/24 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.161.0/24 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 94.124.65.0/24 | AS51185 |
| Aug 22, 05:31 UTC | 56 | 200.47.55.0/24 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.127.0/24 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.148.0/24 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.112.0/22 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.119.0/24 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.105.0/24 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.224.0/22 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.62.0/24 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.96.0/24 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.78.0/24 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.240.0/21 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.163.0/24 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.122.0/23 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.108.0/22 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.92.0/22 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.165.0/24 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.167.0/24 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.64.0/21 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 103.210.226.0/24 | AS151358 |
| Aug 22, 05:31 UTC | 56 | 200.47.121.0/24 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.162.0/24 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.107.0/24 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.128.0/21 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.98.0/24 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.144.0/24 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.50.0/24 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.109.0/24 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.116.0/23 | AS7908 |
| Aug 22, 05:31 UTC | 60 | 200.180.165.0/24 | AS401776 |
| Aug 22, 05:31 UTC | 56 | 200.47.196.0/24 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.52.0/22 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.219.154.0/24 | AS11644 |
| Aug 22, 05:31 UTC | 56 | 200.47.248.0/21 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.50.0/23 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 201.159.176.0/22 | AS28373 |
| Aug 22, 05:31 UTC | 56 | 200.47.126.0/24 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 116.254.112.0/24 | AS55666 |
| Aug 22, 05:31 UTC | 56 | 200.47.104.0/23 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.100.0/22 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.56.0/21 | AS7908 |
| Aug 22, 05:31 UTC | 58 | 103.106.72.0/24 | AS136883 |
| Aug 22, 05:31 UTC | 56 | 193.142.45.0/24 | AS47780 |
| Aug 22, 05:31 UTC | 56 | 200.47.168.0/24 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.108.0/24 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.58.0/24 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 193.142.47.0/24 | AS47780 |
| Aug 22, 05:31 UTC | 56 | 112.78.39.0/24 | AS55666 |
| Aug 22, 05:31 UTC | 56 | 200.47.106.0/23 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.49.0/24 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.80.0/22 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 200.47.232.0/21 | AS7908 |
| Aug 22, 05:31 UTC | 56 | 193.142.44.0/24 | AS47780 |
| Aug 22, 05:31 UTC | 56 | 200.47.93.0/24 | AS7908 |
| Aug 22, 04:30 UTC | 56 | 83.171.225.0/24 | AS41745 |
| Aug 22, 04:30 UTC | 56 | 103.15.194.0/24 | AS23881 |
| Aug 22, 04:30 UTC | 56 | 194.55.137.0/24 | AS34534 |
| Aug 22, 04:30 UTC | 56 | 91.238.181.0/24 | AS49434 |
| Aug 22, 04:30 UTC | 56 | 103.15.192.0/24 | AS23881 |
| Aug 22, 04:30 UTC | 56 | 194.124.251.0/24 | AS34534 |
| Aug 22, 04:30 UTC | 56 | 23.226.6.0/24 | AS23881 |
| Aug 22, 04:30 UTC | 56 | 203.135.128.0/24 | AS23881 |
| Aug 22, 04:30 UTC | 56 | 191.36.244.0/24 | AS263345 |
| Aug 22, 04:30 UTC | 56 | 191.36.247.0/24 | AS263345 |
| Aug 22, 04:30 UTC | 56 | 105.233.0.0/16 | AS36874 |
| Aug 22, 04:30 UTC | 56 | 191.36.254.0/24 | AS263345 |
| Aug 22, 04:30 UTC | 56 | 87.232.79.0/24 | AS49434 |
| Aug 22, 04:30 UTC | 56 | 79.110.237.0/24 | AS49434 |
| Aug 22, 04:30 UTC | 56 | 191.36.252.0/24 | AS263345 |
| Aug 22, 04:30 UTC | 56 | 23.226.8.0/24 | AS23881 |
| Aug 22, 04:30 UTC | 56 | 175.100.112.0/23 | AS38623 |
| Aug 22, 04:30 UTC | 56 | 111.118.158.0/23 | AS38623 |
| Aug 22, 04:30 UTC | 56 | 213.5.130.0/24 | AS34534 |
| Aug 22, 04:30 UTC | 58 | 91.220.135.0/24 | AS197392 |
| Aug 22, 04:30 UTC | 56 | 83.171.226.0/24 | AS41745 |
| Aug 22, 04:30 UTC | 56 | 203.135.138.0/24 | AS23881 |
| Aug 22, 04:30 UTC | 56 | 45.115.182.0/24 | AS38623 |
| Aug 22, 04:30 UTC | 56 | 164.160.46.0/23 | AS328032 |
| Aug 22, 04:30 UTC | 56 | 111.118.136.0/23 | AS38623 |
| Aug 22, 04:30 UTC | 56 | 160.25.214.0/23 | AS131716 |
| Aug 22, 04:30 UTC | 56 | 175.100.118.0/23 | AS38623 |
| Aug 22, 04:30 UTC | 56 | 146.19.230.0/24 | AS41745 |
| Aug 22, 04:30 UTC | 56 | 194.59.221.0/24 | AS34534 |
| Aug 22, 04:30 UTC | 56 | 203.135.130.0/24 | AS23881 |
| Aug 22, 04:30 UTC | 56 | 41.177.0.0/16 | AS36874 |
| Aug 22, 04:30 UTC | 58 | 82.147.91.0/24 | AS197392 |
| Aug 22, 04:30 UTC | 56 | 191.36.255.0/24 | AS263345 |
| Aug 22, 04:30 UTC | 56 | 138.124.251.0/24 | AS41745 |
| Aug 22, 04:30 UTC | 56 | 194.55.189.0/24 | AS34534 |
| Aug 22, 04:30 UTC | 56 | 191.36.245.0/24 | AS263345 |
| Aug 22, 04:30 UTC | 56 | 130.49.179.0/24 | AS41745 |
| Aug 22, 04:30 UTC | 56 | 191.36.250.0/24 | AS263345 |
| Aug 22, 04:30 UTC | 56 | 191.36.243.0/24 | AS263345 |
| Aug 22, 04:30 UTC | 56 | 185.177.72.0/24 | AS211590 |
| Aug 22, 04:30 UTC | 56 | 23.226.3.0/24 | AS23881 |
| Aug 22, 04:30 UTC | 56 | 194.76.155.0/24 | AS34534 |
| Aug 22, 04:30 UTC | 56 | 194.76.146.0/24 | AS34534 |
| Aug 22, 04:30 UTC | 56 | 164.160.44.0/23 | AS328032 |
| Aug 22, 04:30 UTC | 56 | 143.0.52.0/24 | AS263997 |
| Aug 22, 04:30 UTC | 56 | 203.135.131.0/24 | AS23881 |
| Aug 22, 04:30 UTC | 56 | 45.140.167.0/24 | AS41745 |
| Aug 22, 04:30 UTC | 56 | 45.112.194.0/24 | AS41745 |
| Aug 22, 04:30 UTC | 56 | 103.15.196.0/24 | AS23881 |
| Aug 22, 04:30 UTC | 56 | 191.36.246.0/24 | AS263345 |
| Aug 22, 04:30 UTC | 58 | 191.36.248.0/24 | AS263345 |
| Aug 22, 04:30 UTC | 56 | 45.81.243.0/24 | AS41745 |
| Aug 22, 04:30 UTC | 56 | 83.171.227.0/24 | AS41745 |
| Aug 22, 04:30 UTC | 56 | 45.121.199.0/24 | AS23881 |
| Aug 22, 04:30 UTC | 56 | 45.144.28.0/24 | AS41745 |
| Aug 22, 04:30 UTC | 56 | 138.124.70.0/24 | AS41745 |
| Aug 22, 04:30 UTC | 56 | 23.226.1.0/24 | AS23881 |
| Aug 22, 04:30 UTC | 58 | 82.147.68.0/24 | AS197392 |
| Aug 22, 04:30 UTC | 56 | 45.121.203.0/24 | AS23881 |
| Aug 22, 04:30 UTC | 56 | 203.135.129.0/24 | AS23881 |
| Aug 22, 04:30 UTC | 56 | 194.59.245.0/24 | AS34534 |
| Aug 22, 04:30 UTC | 56 | 111.118.138.0/23 | AS38623 |
| Aug 22, 04:30 UTC | 56 | 170.39.219.0/24 | AS49434 |
| Aug 22, 04:30 UTC | 56 | 160.20.24.0/22 | AS328032 |
| Aug 22, 04:30 UTC | 56 | 196.41.96.0/19 | AS36874 |
| Aug 22, 04:30 UTC | 56 | 45.144.29.0/24 | AS41745 |
| Aug 22, 04:30 UTC | 56 | 191.36.242.0/24 | AS263345 |
| Aug 22, 04:30 UTC | 56 | 45.121.198.0/24 | AS23881 |
| Aug 22, 04:30 UTC | 56 | 141.98.84.0/24 | AS41745 |
| Aug 22, 04:30 UTC | 56 | 194.76.147.0/24 | AS34534 |
| Aug 22, 04:30 UTC | 56 | 191.36.240.0/24 | AS263345 |
| Aug 22, 04:30 UTC | 56 | 191.36.253.0/24 | AS263345 |
| Aug 22, 04:30 UTC | 56 | 103.15.197.0/24 | AS23881 |
| Aug 22, 04:30 UTC | 56 | 191.36.251.0/24 | AS263345 |
| Aug 22, 04:30 UTC | 56 | 119.161.136.0/24 | AS63631 |
| Aug 22, 04:30 UTC | 56 | 165.101.7.0/24 | AS136516 |
| Aug 22, 04:30 UTC | 56 | 138.124.31.0/24 | AS41745 |
| Aug 22, 04:30 UTC | 56 | 194.124.250.0/24 | AS34534 |
| Aug 22, 04:30 UTC | 56 | 196.22.240.0/20 | AS36874 |
| Aug 22, 04:30 UTC | 56 | 194.76.154.0/24 | AS34534 |
| Aug 22, 04:30 UTC | 56 | 45.121.197.0/24 | AS23881 |
| Aug 22, 04:30 UTC | 56 | 191.36.241.0/24 | AS263345 |
| Aug 22, 04:30 UTC | 56 | 185.142.53.0/24 | AS34534 |
| Aug 22, 04:30 UTC | 56 | 45.121.192.0/24 | AS23881 |
| Aug 22, 04:30 UTC | 56 | 103.15.199.0/24 | AS23881 |
| Aug 22, 04:30 UTC | 56 | 45.121.200.0/24 | AS23881 |
| Aug 22, 04:30 UTC | 56 | 191.36.249.0/24 | AS263345 |
| Aug 22, 04:30 UTC | 56 | 23.226.4.0/24 | AS23881 |
| Aug 22, 04:30 UTC | 56 | 23.226.0.0/24 | AS23881 |
| Aug 22, 03:30 UTC | 58 | 103.25.125.0/24 | AS153771 |
| Aug 22, 03:30 UTC | 56 | 112.121.160.0/20 | AS45753 |
| Aug 22, 03:30 UTC | 60 | 84.205.69.0/24 | AS12654 |
| Aug 22, 03:30 UTC | 56 | 52.128.236.0/23 | AS45753 |
| Aug 22, 03:30 UTC | 56 | 43.225.198.0/23 | AS45753 |
| Aug 22, 03:30 UTC | 56 | 52.128.248.0/21 | AS45753 |
| Aug 22, 03:30 UTC | 56 | 52.128.224.0/21 | AS45753 |
| Aug 22, 03:30 UTC | 56 | 112.121.176.0/21 | AS45753 |
| Aug 22, 03:30 UTC | 56 | 52.128.232.0/22 | AS45753 |
| Aug 22, 03:30 UTC | 56 | 202.131.176.0/20 | AS3605 |
| Aug 22, 03:30 UTC | 56 | 202.131.160.0/20 | AS3605 |
| Aug 22, 03:30 UTC | 56 | 202.128.68.0/24 | AS3605 |
| Aug 22, 03:30 UTC | 56 | 202.128.74.0/23 | AS3605 |
| Aug 22, 03:30 UTC | 56 | 202.128.16.0/20 | AS3605 |
| Aug 22, 03:30 UTC | 56 | 202.128.80.0/20 | AS3605 |
| Aug 22, 03:30 UTC | 56 | 209.146.57.0/24 | AS132337 |
| Aug 22, 03:30 UTC | 56 | 202.128.66.0/23 | AS3605 |
| Aug 22, 03:30 UTC | 56 | 202.128.64.0/20 | AS3605 |
| Aug 22, 03:30 UTC | 56 | 202.128.72.0/24 | AS3605 |
| Aug 22, 03:30 UTC | 58 | 209.248.0.0/24 | AS153771 |
| Aug 22, 03:30 UTC | 56 | 202.128.77.0/24 | AS3605 |
| Aug 22, 03:30 UTC | 56 | 102.135.181.0/24 | AS16509 |
| Aug 22, 03:30 UTC | 56 | 121.55.192.0/19 | AS3605 |
| Aug 22, 03:30 UTC | 56 | 112.121.188.0/22 | AS45753 |
| Aug 22, 03:30 UTC | 56 | 202.128.0.0/20 | AS3605 |
| Aug 22, 03:30 UTC | 56 | 200.47.87.0/24 | AS7908 |
| Aug 22, 03:30 UTC | 56 | 101.99.192.0/18 | AS3605 |
| Aug 22, 03:30 UTC | 56 | 121.55.224.0/19 | AS3605 |
| Aug 22, 03:30 UTC | 56 | 200.47.192.0/21 | AS7908 |
| Aug 22, 03:30 UTC | 56 | 101.99.128.0/18 | AS3605 |
| Aug 22, 03:30 UTC | 56 | 37.143.55.0/24 | AS198507 |
| Aug 22, 03:30 UTC | 58 | 136.210.0.0/16 | AS1555 |
| Aug 22, 02:31 UTC | 56 | 115.77.16.0/21 | AS7552 |
| Aug 22, 02:31 UTC | 56 | 103.155.176.0/24 | AS55547 |
| Aug 22, 02:31 UTC | 56 | 27.74.120.0/21 | AS7552 |
| Aug 22, 02:31 UTC | 56 | 103.241.114.0/24 | AS55547 |
| Aug 22, 02:31 UTC | 56 | 116.108.24.0/21 | AS7552 |
| Aug 22, 02:31 UTC | 56 | 115.77.152.0/21 | AS7552 |
| Aug 22, 02:31 UTC | 56 | 27.75.232.0/21 | AS7552 |
| Aug 22, 02:31 UTC | 56 | 171.226.40.0/21 | AS7552 |
| Aug 22, 02:31 UTC | 56 | 137.59.208.0/22 | AS135081 |
| Aug 22, 02:31 UTC | 56 | 103.241.34.0/24 | AS55547 |
| Aug 22, 02:31 UTC | 56 | 58.97.155.0/24 | AS55547 |
| Aug 22, 02:31 UTC | 56 | 116.108.80.0/21 | AS7552 |
| Aug 22, 02:31 UTC | 60 | 45.70.192.0/22 | AS267585 |
Frequently Asked Questions
What is a BGP AS-path anomaly?
An AS-path anomaly is an unusual or implausible sequence of Autonomous Systems in a route advertisement whose unique-AS-path length (prepends collapsed) deviates sharply from the recent 36-hour median for that prefix — an unexpected transit AS, a loop, or a sudden detour. It can reveal a route leak or a path-prepending mistake.
Where does this data come from?
Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.
How often is the AS-path anomaly feed updated?
The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-08-22 06:15 UTC.
How do I subscribe to AS-path anomaly events?
Subscribe to the Atom feed at /pulse/bgp/aspath.atom or poll the JSON endpoint at /api/pulse/bgp/aspath.