Skip to main content
WorldIP.io

Pulse — MOAS conflict (multiple-origin AS)

Two or more origin ASNs announcing the same prefix while the usual origin is still active — often legitimate (anycast, multi-homing, or a migration), sometimes a misconfiguration or hijack.

⇲ Atom All feeds ←
Events last 24h
9,381
Most recent
Showing
200
Refresh
● every 60s

What is MOAS conflict (multiple-origin AS)?

A MOAS (Multiple-Origin AS) conflict is when the same IP prefix is announced into BGP by more than one origin Autonomous System at the same time. It can be benign multi-homing or anycast — or the signature of a route leak or prefix hijack. WorldIP.io flags a MOAS when a prefix with a long-stable origin (7-day, >100-sample baseline) starts being announced by a different ASN.

Geographic distribution

Flagged events

Showing 200 most recent of 9,381 · last 24h
Most recent MOAS conflict (multiple-origin AS) events detected across RIPE RIS collectors in the last 24 hours
When Severity Prefix Primary AS
Oct 14, 13:14 UTC 60 192.68.130.0/24 AS396549
Oct 14, 13:14 UTC 60 54.222.116.0/24 AS23724
Oct 14, 13:14 UTC 60 122.200.104.0/22 AS4847
Oct 14, 13:14 UTC 60 34.0.229.0/24 AS15169
Oct 14, 13:14 UTC 60 193.200.214.0/24 AS43054
Oct 14, 13:14 UTC 60 197.89.210.0/24 AS20011
Oct 14, 13:14 UTC 60 209.23.88.0/24 AS15065
Oct 14, 13:14 UTC 80 45.119.52.0/24 AS55933
Oct 14, 13:14 UTC 60 84.44.26.0/24 AS15924
Oct 14, 13:14 UTC 60 160.187.61.0/24 AS1221
Oct 14, 13:14 UTC 60 202.181.153.0/24 AS207551
Oct 14, 13:14 UTC 60 216.87.136.0/24 AS11840
Oct 14, 13:14 UTC 60 64.137.125.0/24 AS3320
Oct 14, 13:14 UTC 60 116.89.241.0/24 AS150706
Oct 14, 13:14 UTC 60 197.93.132.0/24 AS5713
Oct 14, 13:14 UTC 60 206.227.210.0/24 AS6109
Oct 14, 13:14 UTC 60 34.190.96.0/21 AS15169
Oct 14, 13:14 UTC 60 23.252.77.0/24 AS19257
Oct 14, 13:14 UTC 60 156.154.110.0/23 AS399153
Oct 14, 13:14 UTC 60 45.171.1.0/24 AS268180
Oct 14, 13:14 UTC 60 35.210.0.0/16 AS15169
Oct 14, 13:14 UTC 60 63.222.49.0/24 AS3491
Oct 14, 13:14 UTC 70 141.11.161.0/24 AS29802
Oct 14, 13:14 UTC 60 177.53.204.0/22 AS262483
Oct 14, 13:14 UTC 60 120.49.192.0/22 AS38283
Oct 14, 13:14 UTC 60 200.57.93.0/24 AS22908
Oct 14, 13:14 UTC 60 64.192.54.0/24 AS7856
Oct 14, 13:14 UTC 60 165.140.13.0/24 AS400215
Oct 14, 13:14 UTC 60 5.255.255.0/24 AS208398
Oct 14, 13:14 UTC 60 198.73.135.0/24 AS806
Oct 14, 13:14 UTC 60 38.236.128.0/19 AS52772
Oct 14, 13:14 UTC 60 107.163.24.0/24 AS395776
Oct 14, 13:14 UTC 70 185.90.5.0/24 AS34987
Oct 14, 13:14 UTC 60 119.254.0.0/17 AS23724
Oct 14, 13:14 UTC 60 152.65.231.0/24 AS15169
Oct 14, 13:14 UTC 80 185.239.40.70/32 AS20804
Oct 14, 13:14 UTC 60 110.43.56.0/21 AS58466
Oct 14, 13:14 UTC 60 1.32.226.0/24 AS64050
Oct 14, 13:14 UTC 60 102.36.221.0/24 AS15399
Oct 14, 13:14 UTC 60 185.93.200.0/22 AS197524
Oct 14, 13:14 UTC 60 63.223.22.0/24 AS31713
Oct 14, 13:14 UTC 60 34.3.76.0/22 AS43515
Oct 14, 13:14 UTC 60 177.190.147.0/24 AS263456
Oct 14, 13:14 UTC 60 1.2.4.0/24 AS24151
Oct 14, 13:14 UTC 60 120.133.238.0/24 AS4811
Oct 14, 13:14 UTC 60 117.48.234.0/24 AS58466
Oct 14, 13:14 UTC 60 63.217.20.0/22 AS31713
Oct 14, 13:14 UTC 60 119.254.56.0/21 AS23724
Oct 14, 13:14 UTC 60 177.130.116.0/24 AS22381
Oct 14, 13:14 UTC 70 103.138.92.0/24 AS131655
Oct 14, 13:14 UTC 60 177.4.92.0/24 AS137535
Oct 14, 13:14 UTC 60 212.121.32.0/19 AS12536
Oct 14, 13:14 UTC 60 219.232.112.0/24 AS4847
Oct 14, 13:14 UTC 70 195.46.133.0/24 AS15924
Oct 14, 13:14 UTC 60 63.223.51.0/24 AS31713
Oct 14, 13:14 UTC 60 213.9.245.0/24 AS8903
Oct 14, 13:14 UTC 60 192.58.128.0/24 AS396748
Oct 14, 13:14 UTC 60 204.74.104.0/23 AS399169
Oct 14, 13:14 UTC 60 114.112.96.0/22 AS23724
Oct 14, 13:14 UTC 80 14.1.96.0/23 AS55933
Oct 14, 13:14 UTC 60 87.217.119.0/24 AS12479
Oct 14, 13:14 UTC 60 181.233.126.0/24 AS64160
Oct 14, 13:14 UTC 70 197.101.220.0/22 AS20011
Oct 14, 13:14 UTC 60 154.62.65.0/24 AS8903
Oct 14, 13:14 UTC 60 38.45.216.0/24 AS401944
Oct 14, 13:14 UTC 60 34.191.16.0/21 AS43515
Oct 14, 13:14 UTC 70 177.2.178.0/24 AS140227
Oct 14, 13:14 UTC 60 63.222.147.0/24 AS31713
Oct 14, 13:14 UTC 60 122.200.82.0/24 AS4847
Oct 14, 13:14 UTC 60 198.184.150.0/24 AS33287
Oct 14, 13:14 UTC 60 203.95.128.0/23 AS4847
Oct 14, 13:14 UTC 60 177.1.201.0/24 AS219498
Oct 14, 13:14 UTC 60 87.217.72.0/24 AS12479
Oct 14, 13:14 UTC 70 45.221.116.0/22 AS55933
Oct 14, 13:14 UTC 60 102.222.74.0/24 AS328754
Oct 14, 13:14 UTC 60 192.55.83.0/24 AS396566
Oct 14, 13:14 UTC 60 129.220.23.0/24 AS2021
Oct 14, 13:14 UTC 60 185.135.18.0/24 AS28889
Oct 14, 13:14 UTC 60 219.232.124.0/24 AS4847
Oct 14, 13:14 UTC 60 23.26.249.0/24 AS199737
Oct 14, 13:14 UTC 60 103.91.48.0/24 AS136680
Oct 14, 13:14 UTC 60 131.221.68.0/22 AS271724
Oct 14, 13:14 UTC 60 102.208.81.0/24 AS329469
Oct 14, 13:14 UTC 60 116.198.176.0/22 AS4811
Oct 14, 13:14 UTC 60 63.218.124.0/23 AS31713
Oct 14, 13:14 UTC 60 5.182.186.0/24 AS33667
Oct 14, 13:14 UTC 60 35.213.0.0/17 AS19527
Oct 14, 13:14 UTC 60 197.89.20.0/24 AS20011
Oct 14, 13:14 UTC 60 191.101.59.0/24 AS42831
Oct 14, 13:14 UTC 70 197.101.216.0/22 AS20011
Oct 14, 13:14 UTC 60 185.243.84.0/23 AS213075
Oct 14, 13:14 UTC 60 64.41.94.0/23 AS3064
Oct 14, 13:14 UTC 60 192.68.126.0/24 AS19836
Oct 14, 13:14 UTC 60 38.9.210.0/23 AS273755
Oct 14, 13:14 UTC 60 38.47.132.0/24 AS147019
Oct 14, 13:14 UTC 60 64.92.68.0/24 AS174
Oct 14, 13:14 UTC 60 38.225.66.0/23 AS174
Oct 14, 13:14 UTC 70 188.79.128.0/24 AS12479
Oct 14, 13:14 UTC 60 167.244.212.0/24 AS13536
Oct 14, 13:14 UTC 60 192.42.176.0/24 AS396549
Oct 14, 13:14 UTC 60 43.247.68.0/22 AS4816
Oct 14, 13:14 UTC 60 148.62.86.0/24 AS33070
Oct 14, 13:14 UTC 60 197.89.60.0/24 AS20011
Oct 14, 13:14 UTC 60 147.75.68.0/22 AS15830
Oct 14, 13:14 UTC 60 43.255.200.0/23 AS4808
Oct 14, 13:14 UTC 70 38.19.209.0/24 AS274165
Oct 14, 13:14 UTC 70 112.73.54.0/24 AS9304
Oct 14, 13:14 UTC 60 34.112.0.0/16 AS43515
Oct 14, 13:14 UTC 60 197.93.178.0/24 AS20011
Oct 14, 13:14 UTC 60 196.13.136.0/24 AS327753
Oct 14, 13:14 UTC 60 35.206.6.0/24 AS43515
Oct 14, 13:14 UTC 70 67.211.156.0/23 AS22709
Oct 14, 13:14 UTC 60 31.77.228.0/24 AS202226
Oct 14, 13:14 UTC 60 197.89.247.0/24 AS5713
Oct 14, 13:14 UTC 80 138.94.8.1/32 AS28360
Oct 14, 13:14 UTC 80 197.158.241.0/24 AS37343
Oct 14, 13:14 UTC 60 152.65.244.0/24 AS19527
Oct 14, 13:14 UTC 70 94.183.223.0/24 AS213915
Oct 14, 13:14 UTC 60 216.87.145.0/24 AS396549
Oct 14, 13:14 UTC 60 195.209.208.0/20 AS35598
Oct 14, 13:14 UTC 60 92.60.174.0/24 AS8903
Oct 14, 13:14 UTC 60 57.140.215.0/24 AS19527
Oct 14, 13:14 UTC 60 52.82.165.0/24 AS9808
Oct 14, 13:14 UTC 60 89.30.84.0/24 AS4455
Oct 14, 13:14 UTC 60 101.52.204.0/22 AS4847
Oct 14, 13:14 UTC 60 199.212.114.0/24 AS812
Oct 14, 13:14 UTC 60 154.57.39.0/24 AS174
Oct 14, 13:14 UTC 60 40.27.174.0/23 AS33651
Oct 14, 13:14 UTC 60 148.59.169.0/24 AS203
Oct 14, 13:14 UTC 70 38.45.120.0/24 AS9294
Oct 14, 13:14 UTC 60 124.250.64.0/18 AS23724
Oct 14, 13:14 UTC 60 194.147.90.0/24 AS43278
Oct 14, 13:14 UTC 60 185.75.170.0/23 AS20284
Oct 14, 13:14 UTC 60 34.191.56.0/21 AS43515
Oct 14, 13:14 UTC 60 177.2.189.0/24 AS137535
Oct 14, 13:14 UTC 60 31.217.135.0/24 AS4455
Oct 14, 13:14 UTC 60 102.176.92.0/24 AS29614
Oct 14, 13:14 UTC 60 38.47.193.0/24 AS137535
Oct 14, 13:14 UTC 70 217.150.197.0/24 AS12389
Oct 14, 13:14 UTC 60 38.188.76.0/24 AS138754
Oct 14, 13:14 UTC 70 38.213.167.0/24 AS984
Oct 14, 13:14 UTC 60 116.89.242.0/24 AS150706
Oct 14, 13:14 UTC 60 156.154.127.0/24 AS12008
Oct 14, 13:14 UTC 60 2.27.196.0/22 AS3257
Oct 14, 13:14 UTC 60 195.234.216.0/22 AS25081
Oct 14, 13:14 UTC 60 206.227.195.0/24 AS6109
Oct 14, 13:14 UTC 70 31.145.128.0/17 AS15924
Oct 14, 13:14 UTC 60 103.169.158.0/24 AS140228
Oct 14, 13:14 UTC 80 201.3.24.0/21 AS8167
Oct 14, 13:14 UTC 60 23.230.32.0/24 AS47553
Oct 14, 13:14 UTC 80 207.140.0.0/15 AS7018
Oct 14, 13:14 UTC 60 34.4.32.0/19 AS15169
Oct 14, 13:14 UTC 70 93.156.128.0/18 AS12946
Oct 14, 13:14 UTC 60 63.222.68.0/24 AS31713
Oct 14, 13:14 UTC 70 200.193.48.0/21 AS8167
Oct 14, 13:14 UTC 60 197.89.93.0/24 AS20011
Oct 14, 13:14 UTC 60 176.122.207.0/24 AS58006
Oct 14, 13:14 UTC 60 198.135.250.0/24 AS18697
Oct 14, 13:14 UTC 60 91.106.240.0/20 AS15924
Oct 14, 13:14 UTC 60 177.2.188.0/24 AS137535
Oct 14, 13:14 UTC 70 45.116.76.0/22 AS55933
Oct 14, 13:14 UTC 60 34.191.0.0/21 AS43515
Oct 14, 13:14 UTC 60 149.5.36.0/22 AS206723
Oct 14, 13:14 UTC 70 90.171.12.0/23 AS12479
Oct 14, 13:14 UTC 60 27.121.109.0/24 AS56111
Oct 14, 13:14 UTC 60 38.45.121.0/24 AS9294
Oct 14, 13:14 UTC 60 222.126.240.0/23 AS7468
Oct 14, 13:14 UTC 60 91.196.184.0/22 AS4455
Oct 14, 13:14 UTC 60 69.80.130.0/24 AS395597
Oct 14, 13:14 UTC 60 34.3.16.0/23 AS43515
Oct 14, 13:14 UTC 60 88.133.128.0/20 AS197524
Oct 14, 13:14 UTC 70 192.82.134.0/24 AS396549
Oct 14, 13:14 UTC 70 189.89.253.0/24 AS272772
Oct 14, 13:14 UTC 60 195.86.32.0/24 AS984
Oct 14, 13:14 UTC 60 185.233.164.0/24 AS15924
Oct 14, 13:14 UTC 60 203.76.212.0/22 AS4811
Oct 14, 13:14 UTC 60 35.219.224.0/19 AS15169
Oct 14, 13:14 UTC 60 154.56.215.0/24 AS52164
Oct 14, 13:14 UTC 70 112.73.55.0/24 AS9304
Oct 14, 13:14 UTC 60 185.238.172.0/24 AS51865
Oct 14, 13:14 UTC 60 66.9.98.0/24 AS7029
Oct 14, 13:14 UTC 60 197.93.168.0/24 AS20011
Oct 14, 13:14 UTC 70 195.87.241.0/24 AS15924
Oct 14, 13:14 UTC 60 34.190.56.0/21 AS15169
Oct 14, 13:14 UTC 60 195.47.250.0/24 AS209641
Oct 14, 13:14 UTC 60 192.42.177.0/24 AS396549
Oct 14, 13:14 UTC 80 187.84.64.0/20 AS61832
Oct 14, 13:14 UTC 60 192.82.134.0/24 AS396549
Oct 14, 13:14 UTC 60 45.43.16.0/24 AS398465
Oct 14, 13:14 UTC 70 38.19.208.0/24 AS274165
Oct 14, 13:14 UTC 60 63.222.186.0/24 AS31713
Oct 14, 13:14 UTC 60 198.41.0.0/24 AS396549
Oct 14, 13:14 UTC 60 209.73.147.0/24 AS3561
Oct 14, 13:14 UTC 60 185.77.0.0/24 AS15924
Oct 14, 13:14 UTC 60 179.3.134.0/23 AS6535
Oct 14, 13:14 UTC 60 45.174.208.0/22 AS267388
Oct 14, 13:14 UTC 60 125.208.36.0/24 AS24409
Oct 14, 13:14 UTC 60 23.172.217.0/24 AS400992
Oct 14, 13:14 UTC 70 85.52.68.0/24 AS12479
Oct 14, 13:14 UTC 60 192.82.134.0/24 AS396549

Frequently Asked Questions

What is a BGP MOAS conflict (multiple-origin AS)?

A MOAS (Multiple-Origin AS) conflict is when the same IP prefix is announced into BGP by more than one origin Autonomous System at the same time. It can be benign multi-homing or anycast — or the signature of a route leak or prefix hijack. WorldIP.io flags a MOAS when a prefix with a long-stable origin (7-day, >100-sample baseline) starts being announced by a different ASN.

Where does this data come from?

Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.

How often is the MOAS conflict (multiple-origin AS) feed updated?

The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-10-14 13:20 UTC.

How do I subscribe to MOAS conflict (multiple-origin AS) events?

Subscribe to the Atom feed at /pulse/bgp/moas.atom or poll the JSON endpoint at /api/pulse/bgp/moas.

Share