Pulse — AS-path anomaly
Unique-AS-path lengths (prepends collapsed) that deviate sharply from the recent 36-hour median for that prefix.
What is AS-path anomaly?
An AS-path anomaly is an unusual or implausible sequence of Autonomous Systems in a route advertisement whose unique-AS-path length (prepends collapsed) deviates sharply from the recent 36-hour median for that prefix — an unexpected transit AS, a loop, or a sudden detour. It can reveal a route leak or a path-prepending mistake.
Geographic distribution
Flagged events
Showing 200 most recent of 5,780 · last 24h| When | Severity | Prefix | AS |
|---|---|---|---|
| Oct 14, 22:16 UTC | 56 | 85.155.128.0/24 | AS213176 |
| Oct 14, 22:16 UTC | 56 | 188.241.67.0/24 | AS64445 |
| Oct 14, 22:16 UTC | 56 | 115.108.211.0/24 | AS17908 |
| Oct 14, 22:16 UTC | 56 | 196.208.18.0/23 | AS20011 |
| Oct 14, 22:16 UTC | 56 | 23.142.89.0/24 | AS203729 |
| Oct 14, 22:16 UTC | 56 | 198.54.9.0/24 | AS37130 |
| Oct 14, 22:16 UTC | 56 | 77.47.176.0/23 | AS25500 |
| Oct 14, 22:16 UTC | 56 | 45.183.188.0/22 | AS269298 |
| Oct 14, 22:16 UTC | 56 | 91.216.174.0/24 | AS197055 |
| Oct 14, 22:16 UTC | 56 | 163.195.38.0/24 | AS37130 |
| Oct 14, 22:16 UTC | 56 | 202.37.133.0/24 | AS152687 |
| Oct 14, 22:16 UTC | 56 | 197.101.136.0/21 | AS20011 |
| Oct 14, 22:16 UTC | 56 | 192.96.235.0/24 | AS37130 |
| Oct 14, 22:16 UTC | 56 | 198.54.4.0/22 | AS37130 |
| Oct 14, 22:16 UTC | 56 | 188.240.229.0/24 | AS64445 |
| Oct 14, 22:16 UTC | 56 | 77.47.192.0/20 | AS25500 |
| Oct 14, 22:16 UTC | 56 | 44.30.201.0/24 | AS208755 |
| Oct 14, 22:16 UTC | 56 | 200.47.29.0/24 | AS7908 |
| Oct 14, 22:16 UTC | 60 | 120.50.59.0/24 | AS132196 |
| Oct 14, 22:16 UTC | 56 | 58.97.162.0/24 | AS58884 |
| Oct 14, 22:16 UTC | 56 | 115.108.210.0/24 | AS17908 |
| Oct 14, 22:16 UTC | 56 | 77.47.136.0/22 | AS25500 |
| Oct 14, 22:16 UTC | 56 | 192.96.241.0/24 | AS37130 |
| Oct 14, 22:16 UTC | 56 | 163.195.0.0/17 | AS37130 |
| Oct 14, 22:16 UTC | 56 | 38.211.244.0/24 | AS213791 |
| Oct 14, 22:16 UTC | 56 | 200.47.4.0/24 | AS7908 |
| Oct 14, 22:16 UTC | 56 | 77.47.128.0/21 | AS25500 |
| Oct 14, 22:16 UTC | 56 | 185.2.177.0/24 | AS42473 |
| Oct 14, 22:16 UTC | 56 | 200.47.145.0/24 | AS7908 |
| Oct 14, 22:16 UTC | 56 | 44.30.33.0/24 | AS208755 |
| Oct 14, 22:16 UTC | 56 | 176.223.64.0/24 | AS64445 |
| Oct 14, 22:16 UTC | 56 | 103.38.48.0/24 | AS132506 |
| Oct 14, 22:16 UTC | 56 | 188.241.143.0/24 | AS64445 |
| Oct 14, 22:16 UTC | 56 | 197.101.170.0/23 | AS20011 |
| Oct 14, 22:16 UTC | 56 | 77.47.214.0/23 | AS25500 |
| Oct 14, 22:16 UTC | 56 | 185.184.242.0/24 | AS64445 |
| Oct 14, 22:16 UTC | 56 | 164.151.0.0/17 | AS37130 |
| Oct 14, 22:16 UTC | 56 | 45.64.195.0/24 | AS17625 |
| Oct 14, 22:16 UTC | 56 | 200.47.0.0/24 | AS7908 |
| Oct 14, 22:16 UTC | 56 | 188.172.255.0/24 | AS42473 |
| Oct 14, 22:16 UTC | 56 | 185.26.74.0/24 | AS42065 |
| Oct 14, 22:16 UTC | 56 | 196.28.42.0/23 | AS20011 |
| Oct 14, 22:16 UTC | 56 | 77.47.224.0/20 | AS25500 |
| Oct 14, 22:16 UTC | 56 | 196.208.40.0/22 | AS20011 |
| Oct 14, 22:16 UTC | 64 | 204.157.236.0/24 | AS52511 |
| Oct 14, 22:16 UTC | 56 | 188.240.228.0/23 | AS64445 |
| Oct 14, 22:16 UTC | 60 | 120.50.60.0/24 | AS132196 |
| Oct 14, 22:16 UTC | 56 | 94.156.34.0/24 | AS60859 |
| Oct 14, 22:16 UTC | 56 | 196.28.40.0/24 | AS20011 |
| Oct 14, 22:16 UTC | 56 | 198.252.116.0/22 | AS54934 |
| Oct 14, 22:16 UTC | 56 | 77.47.184.0/21 | AS25500 |
| Oct 14, 22:16 UTC | 56 | 192.96.238.0/24 | AS37130 |
| Oct 14, 22:16 UTC | 56 | 201.71.26.0/24 | AS270290 |
| Oct 14, 22:16 UTC | 56 | 77.47.208.0/23 | AS25500 |
| Oct 14, 22:16 UTC | 56 | 198.54.1.0/24 | AS37130 |
| Oct 14, 22:16 UTC | 56 | 188.241.139.0/24 | AS64445 |
| Oct 14, 22:16 UTC | 56 | 163.195.40.0/22 | AS37130 |
| Oct 14, 22:16 UTC | 56 | 163.195.128.0/17 | AS37130 |
| Oct 14, 22:16 UTC | 56 | 192.96.236.0/24 | AS37130 |
| Oct 14, 22:16 UTC | 56 | 196.208.36.0/22 | AS20011 |
| Oct 14, 22:16 UTC | 56 | 197.101.168.0/23 | AS20011 |
| Oct 14, 22:16 UTC | 56 | 196.208.44.0/22 | AS20011 |
| Oct 14, 22:16 UTC | 56 | 198.54.8.0/24 | AS37130 |
| Oct 14, 22:16 UTC | 56 | 197.101.134.0/23 | AS20011 |
| Oct 14, 22:16 UTC | 56 | 200.47.8.0/21 | AS7908 |
| Oct 14, 22:16 UTC | 56 | 196.208.80.0/22 | AS20011 |
| Oct 14, 22:16 UTC | 56 | 193.202.17.0/24 | AS35056 |
| Oct 14, 22:16 UTC | 56 | 77.47.160.0/20 | AS25500 |
| Oct 14, 22:16 UTC | 56 | 200.47.23.0/24 | AS7908 |
| Oct 14, 22:16 UTC | 56 | 45.234.188.0/24 | AS267377 |
| Oct 14, 22:16 UTC | 56 | 77.47.216.0/21 | AS25500 |
| Oct 14, 22:16 UTC | 56 | 188.241.66.0/24 | AS64445 |
| Oct 14, 22:16 UTC | 56 | 209.87.222.0/24 | AS31997 |
| Oct 14, 22:16 UTC | 56 | 196.208.48.0/22 | AS20011 |
| Oct 14, 22:16 UTC | 56 | 200.47.16.0/21 | AS7908 |
| Oct 14, 22:16 UTC | 56 | 44.48.41.0/24 | AS203729 |
| Oct 14, 22:16 UTC | 56 | 196.28.40.0/21 | AS20011 |
| Oct 14, 22:16 UTC | 56 | 1.7.165.0/24 | AS9583 |
| Oct 14, 22:16 UTC | 56 | 200.3.116.0/22 | AS7908 |
| Oct 14, 22:16 UTC | 56 | 209.35.253.0/24 | AS213176 |
| Oct 14, 22:16 UTC | 60 | 120.50.61.0/24 | AS132196 |
| Oct 14, 22:16 UTC | 56 | 37.252.245.0/24 | AS42473 |
| Oct 14, 22:16 UTC | 56 | 192.96.239.0/24 | AS37130 |
| Oct 14, 22:16 UTC | 56 | 188.241.138.0/24 | AS64445 |
| Oct 14, 22:16 UTC | 56 | 77.47.140.0/23 | AS25500 |
| Oct 14, 22:16 UTC | 56 | 196.28.32.0/21 | AS20011 |
| Oct 14, 22:16 UTC | 56 | 196.2.16.0/21 | AS20011 |
| Oct 14, 22:16 UTC | 56 | 188.214.199.0/24 | AS64445 |
| Oct 14, 21:17 UTC | 58 | 185.255.89.0/24 | AS61173 |
| Oct 14, 21:17 UTC | 56 | 43.230.195.0/24 | AS23673 |
| Oct 14, 21:17 UTC | 56 | 198.90.73.0/24 | AS19408 |
| Oct 14, 21:17 UTC | 56 | 203.189.135.0/24 | AS23673 |
| Oct 14, 21:17 UTC | 56 | 190.104.33.0/24 | AS52363 |
| Oct 14, 21:17 UTC | 56 | 177.91.44.0/23 | AS263427 |
| Oct 14, 21:17 UTC | 56 | 199.193.226.0/24 | AS40187 |
| Oct 14, 21:17 UTC | 56 | 203.189.140.0/24 | AS23673 |
| Oct 14, 21:17 UTC | 56 | 208.71.72.0/21 | AS40252 |
| Oct 14, 21:17 UTC | 56 | 199.193.227.0/24 | AS40187 |
| Oct 14, 21:17 UTC | 56 | 190.112.188.0/24 | AS52363 |
| Oct 14, 21:17 UTC | 56 | 208.90.187.0/24 | AS40187 |
| Oct 14, 21:17 UTC | 56 | 199.193.225.0/24 | AS40187 |
| Oct 14, 21:17 UTC | 56 | 43.230.192.0/22 | AS23673 |
| Oct 14, 21:17 UTC | 56 | 43.230.194.0/24 | AS23673 |
| Oct 14, 21:17 UTC | 56 | 43.230.192.0/24 | AS23673 |
| Oct 14, 21:17 UTC | 56 | 199.193.224.0/24 | AS40187 |
| Oct 14, 21:17 UTC | 56 | 43.230.193.0/24 | AS23673 |
| Oct 14, 21:17 UTC | 56 | 102.205.100.0/22 | AS329578 |
| Oct 14, 21:17 UTC | 56 | 208.90.186.0/24 | AS40187 |
| Oct 14, 20:17 UTC | 56 | 102.205.195.0/24 | AS329550 |
| Oct 14, 20:17 UTC | 56 | 193.0.14.0/23 | AS25152 |
| Oct 14, 20:17 UTC | 60 | 207.157.159.0/24 | AS54179 |
| Oct 14, 20:17 UTC | 56 | 186.148.192.0/23 | AS61461 |
| Oct 14, 20:17 UTC | 56 | 104.245.128.0/21 | AS19116 |
| Oct 14, 20:17 UTC | 56 | 82.27.182.0/24 | AS139057 |
| Oct 14, 20:17 UTC | 60 | 190.40.101.0/24 | AS6147 |
| Oct 14, 20:17 UTC | 56 | 190.124.30.0/23 | AS61461 |
| Oct 14, 20:17 UTC | 60 | 199.96.48.0/22 | AS4208 |
| Oct 14, 20:17 UTC | 60 | 185.33.72.0/22 | AS213070 |
| Oct 14, 20:17 UTC | 58 | 200.1.7.0/24 | AS271754 |
| Oct 14, 20:17 UTC | 56 | 203.189.159.0/24 | AS23673 |
| Oct 14, 20:17 UTC | 56 | 211.43.149.0/24 | AS54994 |
| Oct 14, 20:17 UTC | 60 | 170.185.136.0/24 | AS11686 |
| Oct 14, 20:17 UTC | 62 | 45.178.55.0/24 | AS269776 |
| Oct 14, 19:16 UTC | 56 | 89.116.213.0/24 | AS47583 |
| Oct 14, 19:16 UTC | 56 | 185.173.18.0/24 | AS206763 |
| Oct 14, 19:16 UTC | 56 | 200.24.98.0/24 | AS266416 |
| Oct 14, 19:16 UTC | 56 | 71.18.118.0/24 | AS396986 |
| Oct 14, 19:16 UTC | 58 | 82.27.180.0/24 | AS139057 |
| Oct 14, 19:16 UTC | 56 | 193.84.78.0/24 | AS43298 |
| Oct 14, 19:16 UTC | 56 | 95.142.204.0/23 | AS47542 |
| Oct 14, 19:16 UTC | 56 | 181.119.91.0/24 | AS52468 |
| Oct 14, 19:16 UTC | 56 | 94.131.4.0/24 | AS8772 |
| Oct 14, 18:17 UTC | 56 | 193.84.104.0/22 | AS2852 |
| Oct 14, 18:17 UTC | 56 | 193.84.55.0/24 | AS2852 |
| Oct 14, 18:17 UTC | 56 | 78.128.128.0/17 | AS2852 |
| Oct 14, 18:17 UTC | 56 | 193.84.160.0/20 | AS2852 |
| Oct 14, 18:17 UTC | 56 | 147.228.0.0/16 | AS2852 |
| Oct 14, 18:17 UTC | 56 | 146.102.0.0/16 | AS2852 |
| Oct 14, 18:17 UTC | 58 | 45.232.10.0/24 | AS267281 |
| Oct 14, 18:17 UTC | 56 | 177.85.243.0/24 | AS270602 |
| Oct 14, 18:17 UTC | 60 | 177.66.76.0/24 | AS264117 |
| Oct 14, 18:17 UTC | 56 | 147.230.0.0/16 | AS2852 |
| Oct 14, 18:17 UTC | 56 | 149.96.204.0/22 | AS16839 |
| Oct 14, 18:17 UTC | 56 | 185.8.160.0/22 | AS2852 |
| Oct 14, 18:17 UTC | 58 | 170.84.2.0/23 | AS263589 |
| Oct 14, 18:17 UTC | 56 | 193.84.192.0/19 | AS2852 |
| Oct 14, 18:17 UTC | 56 | 147.33.0.0/16 | AS2852 |
| Oct 14, 18:17 UTC | 56 | 193.84.80.0/22 | AS2852 |
| Oct 14, 18:17 UTC | 60 | 189.76.72.0/23 | AS52752 |
| Oct 14, 18:17 UTC | 56 | 177.85.242.0/24 | AS270602 |
| Oct 14, 18:17 UTC | 56 | 185.123.171.0/24 | AS200005 |
| Oct 14, 18:17 UTC | 56 | 147.231.0.0/16 | AS2852 |
| Oct 14, 18:17 UTC | 56 | 193.84.56.0/21 | AS2852 |
| Oct 14, 18:17 UTC | 56 | 147.251.0.0/16 | AS2852 |
| Oct 14, 18:17 UTC | 60 | 177.66.77.0/24 | AS264117 |
| Oct 14, 18:17 UTC | 58 | 140.150.31.0/24 | AS54994 |
| Oct 14, 18:17 UTC | 56 | 193.84.208.0/20 | AS2852 |
| Oct 14, 18:17 UTC | 56 | 217.112.158.0/24 | AS200005 |
| Oct 14, 18:17 UTC | 58 | 154.64.20.0/22 | AS271493 |
| Oct 14, 18:17 UTC | 56 | 158.194.0.0/16 | AS2852 |
| Oct 14, 18:17 UTC | 56 | 193.84.192.0/20 | AS2852 |
| Oct 14, 18:17 UTC | 56 | 158.196.0.0/16 | AS2852 |
| Oct 14, 18:17 UTC | 56 | 217.112.151.0/24 | AS200005 |
| Oct 14, 18:17 UTC | 56 | 147.32.0.0/16 | AS2852 |
| Oct 14, 18:17 UTC | 58 | 138.117.76.0/22 | AS263774 |
| Oct 14, 18:17 UTC | 58 | 192.6.195.0/24 | AS274757 |
| Oct 14, 18:17 UTC | 56 | 193.84.32.0/20 | AS2852 |
| Oct 14, 18:17 UTC | 56 | 185.123.170.0/24 | AS200005 |
| Oct 14, 18:17 UTC | 56 | 195.178.64.0/19 | AS2852 |
| Oct 14, 18:17 UTC | 56 | 193.84.53.0/24 | AS2852 |
| Oct 14, 18:17 UTC | 56 | 193.84.116.0/23 | AS2852 |
| Oct 14, 18:17 UTC | 56 | 195.113.0.0/16 | AS2852 |
| Oct 14, 18:17 UTC | 56 | 149.96.132.0/24 | AS16839 |
| Oct 14, 18:17 UTC | 56 | 160.216.0.0/16 | AS2852 |
| Oct 14, 18:17 UTC | 56 | 149.96.133.0/24 | AS16839 |
| Oct 14, 18:17 UTC | 58 | 170.84.0.0/23 | AS263589 |
| Oct 14, 17:16 UTC | 56 | 186.216.192.0/23 | AS52973 |
| Oct 14, 17:16 UTC | 56 | 103.35.110.0/24 | AS23991 |
| Oct 14, 17:16 UTC | 56 | 186.216.196.0/23 | AS52973 |
| Oct 14, 17:16 UTC | 56 | 103.178.187.0/24 | AS63969 |
| Oct 14, 17:16 UTC | 56 | 202.40.185.0/24 | AS23991 |
| Oct 14, 17:16 UTC | 56 | 43.239.75.0/24 | AS133443 |
| Oct 14, 17:16 UTC | 56 | 103.177.124.0/23 | AS63969 |
| Oct 14, 17:16 UTC | 56 | 103.124.250.0/24 | AS63969 |
| Oct 14, 17:16 UTC | 56 | 202.40.186.0/24 | AS23991 |
| Oct 14, 17:16 UTC | 56 | 186.216.200.0/23 | AS52973 |
| Oct 14, 17:16 UTC | 56 | 186.216.204.0/23 | AS52973 |
| Oct 14, 17:16 UTC | 56 | 103.35.109.0/24 | AS23991 |
| Oct 14, 17:16 UTC | 56 | 45.149.56.0/24 | AS209097 |
| Oct 14, 17:16 UTC | 56 | 119.31.254.0/24 | AS54994 |
| Oct 14, 17:16 UTC | 56 | 186.216.200.0/22 | AS52973 |
| Oct 14, 17:16 UTC | 56 | 186.216.194.0/23 | AS52973 |
| Oct 14, 17:16 UTC | 56 | 186.216.192.0/22 | AS52973 |
| Oct 14, 17:16 UTC | 56 | 43.132.86.0/24 | AS139341 |
| Oct 14, 17:16 UTC | 56 | 186.216.206.0/23 | AS52973 |
| Oct 14, 17:16 UTC | 56 | 202.40.188.0/24 | AS23991 |
| Oct 14, 17:16 UTC | 56 | 186.216.202.0/23 | AS52973 |
| Oct 14, 17:16 UTC | 60 | 102.204.253.0/24 | AS329614 |
| Oct 14, 17:16 UTC | 56 | 186.216.198.0/23 | AS52973 |
| Oct 14, 17:16 UTC | 56 | 114.111.58.0/24 | AS54994 |
Frequently Asked Questions
What is a BGP AS-path anomaly?
An AS-path anomaly is an unusual or implausible sequence of Autonomous Systems in a route advertisement whose unique-AS-path length (prepends collapsed) deviates sharply from the recent 36-hour median for that prefix — an unexpected transit AS, a loop, or a sudden detour. It can reveal a route leak or a path-prepending mistake.
Where does this data come from?
Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.
How often is the AS-path anomaly feed updated?
The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-10-14 22:55 UTC.
How do I subscribe to AS-path anomaly events?
Subscribe to the Atom feed at /pulse/bgp/aspath.atom or poll the JSON endpoint at /api/pulse/bgp/aspath.