Pulse — MOAS conflict (multiple-origin AS)
Two or more origin ASNs announcing the same prefix while the usual origin is still active — often legitimate (anycast, multi-homing, or a migration), sometimes a misconfiguration or hijack.
Events last 24h
11,751
Most recent
Showing
200
Refresh
● every 60s
What is MOAS conflict (multiple-origin AS)?
A MOAS (Multiple-Origin AS) conflict is when the same IP prefix is announced into BGP by more than one origin Autonomous System at the same time. It can be benign multi-homing or anycast — or the signature of a route leak or prefix hijack. WorldIP.io flags a MOAS when a prefix with a long-stable origin (7-day, >100-sample baseline) starts being announced by a different ASN.
Geographic distribution
Flagged events
Showing 200 most recent of 11,751 · last 24h| When | Severity | Prefix | Primary AS |
|---|---|---|---|
| Aug 29, 21:08 UTC | 60 | 150.129.82.0/23 | AS138968 |
| Aug 29, 21:08 UTC | 60 | 180.184.148.0/22 | AS4811 |
| Aug 29, 21:08 UTC | 60 | 210.77.144.0/21 | AS9308 |
| Aug 29, 21:08 UTC | 60 | 209.40.88.0/24 | AS397765 |
| Aug 29, 21:08 UTC | 60 | 63.216.140.0/24 | AS31713 |
| Aug 29, 21:08 UTC | 60 | 34.1.90.0/24 | AS15169 |
| Aug 29, 21:08 UTC | 60 | 192.52.178.0/24 | AS396566 |
| Aug 29, 21:08 UTC | 70 | 123.108.88.0/24 | AS55996 |
| Aug 29, 21:08 UTC | 60 | 156.154.101.0/24 | AS12008 |
| Aug 29, 21:08 UTC | 60 | 34.1.92.0/24 | AS15169 |
| Aug 29, 21:08 UTC | 70 | 160.236.166.0/24 | AS136969 |
| Aug 29, 21:08 UTC | 60 | 197.89.195.0/24 | AS20011 |
| Aug 29, 21:08 UTC | 60 | 192.54.112.0/24 | AS397197 |
| Aug 29, 21:08 UTC | 60 | 192.35.51.0/24 | AS397197 |
| Aug 29, 21:08 UTC | 60 | 213.9.128.0/24 | AS8903 |
| Aug 29, 21:08 UTC | 70 | 154.194.200.0/22 | AS19318 |
| Aug 29, 21:08 UTC | 60 | 63.221.240.0/24 | AS31713 |
| Aug 29, 21:08 UTC | 70 | 45.204.192.0/19 | AS62468 |
| Aug 29, 21:08 UTC | 60 | 103.212.30.0/24 | AS134909 |
| Aug 29, 21:08 UTC | 70 | 152.175.214.0/24 | AS8143 |
| Aug 29, 21:08 UTC | 60 | 120.136.17.0/24 | AS4847 |
| Aug 29, 21:08 UTC | 60 | 63.218.156.0/23 | AS31713 |
| Aug 29, 21:08 UTC | 60 | 89.30.121.0/24 | AS4455 |
| Aug 29, 21:08 UTC | 60 | 139.159.110.0/24 | AS4811 |
| Aug 29, 21:08 UTC | 60 | 195.39.194.0/23 | AS60798 |
| Aug 29, 21:08 UTC | 60 | 34.0.16.0/20 | AS19527 |
| Aug 29, 21:08 UTC | 70 | 23.180.136.0/24 | AS209242 |
| Aug 29, 21:08 UTC | 60 | 170.33.20.0/24 | AS45102 |
| Aug 29, 21:08 UTC | 60 | 41.191.239.0/24 | AS37123 |
| Aug 29, 21:08 UTC | 60 | 195.5.78.0/24 | AS8903 |
| Aug 29, 21:08 UTC | 60 | 123.103.72.0/21 | AS23724 |
| Aug 29, 21:08 UTC | 60 | 38.247.27.0/24 | AS152672 |
| Aug 29, 21:08 UTC | 60 | 38.127.93.0/24 | AS174 |
| Aug 29, 21:08 UTC | 60 | 200.112.128.0/24 | AS22080 |
| Aug 29, 21:08 UTC | 60 | 156.154.150.0/23 | AS399169 |
| Aug 29, 21:08 UTC | 60 | 192.42.177.0/24 | AS397197 |
| Aug 29, 21:08 UTC | 60 | 192.16.136.0/24 | AS25181 |
| Aug 29, 21:08 UTC | 60 | 110.43.144.0/21 | AS4811 |
| Aug 29, 21:08 UTC | 60 | 121.251.0.0/20 | AS24362 |
| Aug 29, 21:08 UTC | 60 | 23.27.114.0/24 | AS199550 |
| Aug 29, 21:08 UTC | 60 | 102.129.92.0/24 | AS37451 |
| Aug 29, 21:08 UTC | 70 | 80.174.162.0/24 | AS197646 |
| Aug 29, 21:08 UTC | 60 | 203.19.219.0/24 | AS7575 |
| Aug 29, 21:08 UTC | 60 | 37.135.0.0/16 | AS12479 |
| Aug 29, 21:08 UTC | 70 | 41.173.24.0/21 | AS30844 |
| Aug 29, 21:08 UTC | 60 | 59.79.0.0/16 | AS4538 |
| Aug 29, 21:08 UTC | 70 | 101.52.216.0/22 | AS4811 |
| Aug 29, 21:08 UTC | 70 | 154.53.208.0/24 | AS328500 |
| Aug 29, 21:08 UTC | 60 | 34.1.109.0/24 | AS43515 |
| Aug 29, 21:08 UTC | 60 | 192.42.176.0/24 | AS397197 |
| Aug 29, 21:08 UTC | 60 | 71.18.162.0/24 | AS396986 |
| Aug 29, 21:08 UTC | 60 | 118.145.44.0/22 | AS58466 |
| Aug 29, 21:08 UTC | 60 | 222.204.0.0/16 | AS4538 |
| Aug 29, 21:08 UTC | 60 | 35.206.3.0/24 | AS19527 |
| Aug 29, 21:08 UTC | 60 | 34.1.93.0/24 | AS15169 |
| Aug 29, 21:08 UTC | 60 | 38.188.165.0/24 | AS273113 |
| Aug 29, 21:08 UTC | 60 | 34.1.91.0/24 | AS15169 |
| Aug 29, 21:08 UTC | 60 | 154.43.165.0/24 | AS211691 |
| Aug 29, 21:08 UTC | 70 | 192.35.51.0/24 | AS397197 |
| Aug 29, 21:08 UTC | 60 | 64.38.253.0/24 | AS32164 |
| Aug 29, 21:08 UTC | 70 | 114.116.96.0/19 | AS23724 |
| Aug 29, 21:08 UTC | 60 | 45.74.56.0/24 | AS140641 |
| Aug 29, 21:08 UTC | 60 | 223.203.100.0/24 | AS4847 |
| Aug 29, 21:08 UTC | 60 | 23.19.53.0/24 | AS205544 |
| Aug 29, 21:08 UTC | 60 | 102.220.88.0/22 | AS55933 |
| Aug 29, 21:08 UTC | 60 | 216.87.145.0/24 | AS397197 |
| Aug 29, 21:08 UTC | 70 | 206.147.186.0/24 | AS5715 |
| Aug 29, 21:08 UTC | 60 | 34.0.236.0/23 | AS19527 |
| Aug 29, 21:08 UTC | 60 | 27.123.2.0/24 | AS45706 |
| Aug 29, 21:08 UTC | 60 | 192.43.172.0/24 | AS397197 |
| Aug 29, 21:08 UTC | 60 | 63.217.208.0/22 | AS31713 |
| Aug 29, 21:08 UTC | 60 | 63.216.152.0/22 | AS31713 |
| Aug 29, 21:08 UTC | 60 | 187.188.140.0/24 | AS17072 |
| Aug 29, 21:08 UTC | 60 | 107.163.56.0/24 | AS395776 |
| Aug 29, 21:08 UTC | 60 | 5.182.34.0/24 | AS201030 |
| Aug 29, 21:08 UTC | 60 | 164.156.20.0/22 | AS10753 |
| Aug 29, 21:08 UTC | 80 | 23.26.16.0/22 | AS401152 |
| Aug 29, 21:08 UTC | 70 | 101.124.22.0/24 | AS23724 |
| Aug 29, 21:08 UTC | 60 | 139.159.168.0/22 | AS58466 |
| Aug 29, 21:08 UTC | 60 | 190.90.218.0/24 | AS262589 |
| Aug 29, 21:08 UTC | 60 | 192.42.173.0/24 | AS397197 |
| Aug 29, 21:08 UTC | 60 | 120.132.88.0/22 | AS23724 |
| Aug 29, 21:08 UTC | 60 | 139.159.108.0/23 | AS4811 |
| Aug 29, 21:08 UTC | 80 | 192.42.178.0/24 | AS396566 |
| Aug 29, 21:08 UTC | 60 | 124.251.128.0/21 | AS9308 |
| Aug 29, 21:08 UTC | 60 | 120.133.30.0/24 | AS4835 |
| Aug 29, 21:08 UTC | 80 | 38.95.112.0/24 | AS152672 |
| Aug 29, 21:08 UTC | 60 | 74.200.186.0/24 | AS22645 |
| Aug 29, 21:08 UTC | 60 | 12.185.7.0/24 | AS4185 |
| Aug 29, 21:08 UTC | 60 | 41.79.248.0/24 | AS31713 |
| Aug 29, 21:08 UTC | 60 | 118.197.56.0/21 | AS4811 |
| Aug 29, 21:08 UTC | 60 | 124.250.244.0/23 | AS9308 |
| Aug 29, 21:08 UTC | 60 | 192.12.94.0/24 | AS396549 |
| Aug 29, 21:08 UTC | 60 | 90.77.224.0/22 | AS12479 |
| Aug 29, 21:08 UTC | 60 | 197.89.198.0/24 | AS20011 |
| Aug 29, 21:08 UTC | 60 | 35.206.32.0/19 | AS43515 |
| Aug 29, 21:08 UTC | 70 | 34.1.69.0/24 | AS43515 |
| Aug 29, 21:08 UTC | 60 | 197.89.141.0/24 | AS20011 |
| Aug 29, 21:08 UTC | 60 | 93.158.128.0/18 | AS208398 |
| Aug 29, 21:08 UTC | 60 | 216.87.145.0/24 | AS397197 |
| Aug 29, 21:08 UTC | 70 | 197.89.7.0/24 | AS20011 |
| Aug 29, 21:08 UTC | 60 | 202.177.157.0/24 | AS132215 |
| Aug 29, 21:08 UTC | 60 | 185.162.75.0/24 | AS213122 |
| Aug 29, 21:08 UTC | 60 | 124.251.8.0/23 | AS9308 |
| Aug 29, 21:08 UTC | 60 | 192.82.133.0/24 | AS19836 |
| Aug 29, 21:08 UTC | 60 | 156.154.105.0/24 | AS12008 |
| Aug 29, 21:08 UTC | 60 | 43.231.167.0/24 | AS23724 |
| Aug 29, 21:08 UTC | 60 | 194.121.203.0/24 | AS12480 |
| Aug 29, 21:08 UTC | 60 | 198.41.0.0/24 | AS397197 |
| Aug 29, 21:08 UTC | 70 | 192.68.130.0/24 | AS396549 |
| Aug 29, 21:08 UTC | 60 | 213.180.192.0/19 | AS208398 |
| Aug 29, 21:08 UTC | 60 | 63.218.146.0/23 | AS31713 |
| Aug 29, 21:08 UTC | 60 | 154.202.84.0/24 | AS328608 |
| Aug 29, 21:08 UTC | 60 | 35.207.0.0/18 | AS43515 |
| Aug 29, 21:08 UTC | 60 | 200.7.212.0/24 | AS19114 |
| Aug 29, 21:08 UTC | 60 | 89.30.5.0/24 | AS4455 |
| Aug 29, 21:08 UTC | 70 | 192.42.93.0/24 | AS397197 |
| Aug 29, 21:08 UTC | 60 | 45.183.32.0/22 | AS269310 |
| Aug 29, 21:08 UTC | 60 | 175.25.32.0/21 | AS23724 |
| Aug 29, 21:08 UTC | 60 | 199.4.190.0/24 | AS396879 |
| Aug 29, 21:08 UTC | 60 | 77.243.190.0/24 | AS16247 |
| Aug 29, 21:08 UTC | 60 | 1.12.14.0/23 | AS45090 |
| Aug 29, 21:08 UTC | 60 | 34.2.70.0/23 | AS43515 |
| Aug 29, 21:08 UTC | 60 | 34.113.0.0/16 | AS43515 |
| Aug 29, 21:08 UTC | 60 | 38.76.222.0/23 | AS401701 |
| Aug 29, 21:08 UTC | 60 | 166.0.100.0/24 | AS8796 |
| Aug 29, 21:08 UTC | 60 | 69.171.13.0/24 | AS13767 |
| Aug 29, 21:08 UTC | 60 | 197.89.185.0/24 | AS20011 |
| Aug 29, 21:08 UTC | 60 | 120.136.18.0/24 | AS4847 |
| Aug 29, 21:08 UTC | 60 | 192.173.112.0/24 | AS55095 |
| Aug 29, 21:08 UTC | 60 | 34.0.48.0/20 | AS43515 |
| Aug 29, 21:08 UTC | 60 | 216.172.188.0/23 | AS31898 |
| Aug 29, 21:08 UTC | 60 | 192.42.93.0/24 | AS397197 |
| Aug 29, 21:08 UTC | 70 | 192.33.14.0/24 | AS396748 |
| Aug 29, 21:08 UTC | 60 | 63.216.150.0/24 | AS31713 |
| Aug 29, 21:08 UTC | 70 | 192.68.130.0/24 | AS396549 |
| Aug 29, 21:08 UTC | 80 | 199.7.71.0/24 | AS397197 |
| Aug 29, 21:08 UTC | 60 | 159.49.231.0/24 | AS29702 |
| Aug 29, 21:08 UTC | 70 | 192.30.45.0/24 | AS396549 |
| Aug 29, 21:08 UTC | 60 | 192.43.172.0/24 | AS397197 |
| Aug 29, 21:08 UTC | 60 | 43.229.51.0/24 | AS131274 |
| Aug 29, 21:08 UTC | 70 | 192.33.14.0/24 | AS396748 |
| Aug 29, 21:08 UTC | 60 | 192.34.234.0/24 | AS397197 |
| Aug 29, 21:08 UTC | 70 | 103.127.242.0/23 | AS137535 |
| Aug 29, 21:08 UTC | 80 | 216.93.66.0/24 | AS7321 |
| Aug 29, 21:08 UTC | 60 | 189.56.0.0/16 | AS10429 |
| Aug 29, 21:08 UTC | 60 | 202.38.64.0/19 | AS4538 |
| Aug 29, 21:08 UTC | 60 | 81.19.195.0/24 | AS396555 |
| Aug 29, 21:08 UTC | 60 | 92.190.0.0/20 | AS12479 |
| Aug 29, 21:08 UTC | 60 | 38.203.0.0/22 | AS9009 |
| Aug 29, 21:08 UTC | 60 | 192.82.134.0/24 | AS397197 |
| Aug 29, 21:08 UTC | 60 | 103.85.86.0/24 | AS131483 |
| Aug 29, 21:08 UTC | 60 | 118.196.48.0/21 | AS4811 |
| Aug 29, 21:08 UTC | 60 | 161.129.228.0/24 | AS27348 |
| Aug 29, 21:08 UTC | 70 | 79.173.104.0/21 | AS41058 |
| Aug 29, 21:08 UTC | 60 | 107.163.58.0/24 | AS395776 |
| Aug 29, 21:08 UTC | 60 | 45.200.18.0/23 | AS54801 |
| Aug 29, 21:08 UTC | 60 | 192.33.14.0/24 | AS396748 |
| Aug 29, 21:08 UTC | 60 | 198.160.150.0/24 | AS4867 |
| Aug 29, 21:08 UTC | 60 | 206.191.180.0/22 | AS14636 |
| Aug 29, 21:08 UTC | 60 | 38.253.90.0/24 | AS272027 |
| Aug 29, 21:08 UTC | 60 | 192.104.54.0/24 | AS4185 |
| Aug 29, 21:08 UTC | 60 | 120.92.144.0/21 | AS4811 |
| Aug 29, 21:08 UTC | 60 | 192.82.133.0/24 | AS19836 |
| Aug 29, 21:08 UTC | 60 | 192.33.14.0/24 | AS396748 |
| Aug 29, 21:08 UTC | 70 | 192.5.6.0/24 | AS396549 |
| Aug 29, 21:08 UTC | 60 | 175.107.240.0/24 | AS24440 |
| Aug 29, 21:08 UTC | 70 | 212.135.112.0/24 | AS48266 |
| Aug 29, 21:08 UTC | 60 | 71.18.123.0/24 | AS396986 |
| Aug 29, 21:08 UTC | 60 | 121.248.72.0/21 | AS24361 |
| Aug 29, 21:08 UTC | 70 | 0.0.0.0/0 | AS212271 |
| Aug 29, 21:08 UTC | 70 | 110.43.40.0/21 | AS58466 |
| Aug 29, 21:08 UTC | 60 | 212.57.38.0/24 | AS8648 |
| Aug 29, 21:08 UTC | 60 | 202.136.212.0/22 | AS4812 |
| Aug 29, 21:08 UTC | 60 | 101.53.254.0/24 | AS9541 |
| Aug 29, 21:08 UTC | 70 | 38.105.3.0/24 | AS174 |
| Aug 29, 21:08 UTC | 60 | 202.90.104.0/22 | AS4811 |
| Aug 29, 21:08 UTC | 60 | 74.116.139.0/24 | AS23096 |
| Aug 29, 21:08 UTC | 60 | 103.168.230.0/23 | AS41095 |
| Aug 29, 21:08 UTC | 60 | 207.189.143.0/24 | AS394347 |
| Aug 29, 21:08 UTC | 60 | 45.155.100.0/23 | AS42831 |
| Aug 29, 21:08 UTC | 60 | 62.8.74.0/24 | AS15399 |
| Aug 29, 21:08 UTC | 60 | 147.78.60.0/24 | AS40513 |
| Aug 29, 21:08 UTC | 60 | 152.65.230.0/24 | AS19527 |
| Aug 29, 21:08 UTC | 70 | 123.103.13.0/24 | AS23724 |
| Aug 29, 21:08 UTC | 60 | 118.196.112.0/21 | AS4811 |
| Aug 29, 21:08 UTC | 70 | 198.41.0.0/24 | AS397197 |
| Aug 29, 21:08 UTC | 60 | 185.133.64.0/24 | AS9050 |
| Aug 29, 21:08 UTC | 60 | 216.245.88.0/24 | AS28753 |
| Aug 29, 21:08 UTC | 60 | 57.140.209.0/24 | AS15169 |
| Aug 29, 21:08 UTC | 60 | 72.4.130.0/23 | AS3064 |
| Aug 29, 21:08 UTC | 60 | 91.190.187.0/24 | AS219284 |
| Aug 29, 21:08 UTC | 70 | 192.33.14.0/24 | AS396748 |
| Aug 29, 21:08 UTC | 60 | 185.186.205.0/24 | AS206350 |
| Aug 29, 21:08 UTC | 60 | 35.219.128.0/18 | AS43515 |
| Aug 29, 21:08 UTC | 60 | 189.39.185.0/24 | AS270792 |
| Aug 29, 21:08 UTC | 60 | 103.202.120.0/22 | AS4811 |
| Aug 29, 21:08 UTC | 60 | 168.228.28.0/22 | AS264903 |
| Aug 29, 21:08 UTC | 60 | 154.44.9.0/24 | AS979 |
| Aug 29, 21:08 UTC | 60 | 118.196.0.0/21 | AS4811 |
Frequently Asked Questions
What is a BGP MOAS conflict (multiple-origin AS)?
A MOAS (Multiple-Origin AS) conflict is when the same IP prefix is announced into BGP by more than one origin Autonomous System at the same time. It can be benign multi-homing or anycast — or the signature of a route leak or prefix hijack. WorldIP.io flags a MOAS when a prefix with a long-stable origin (7-day, >100-sample baseline) starts being announced by a different ASN.
Where does this data come from?
Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.
How often is the MOAS conflict (multiple-origin AS) feed updated?
The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-08-29 21:20 UTC.
How do I subscribe to MOAS conflict (multiple-origin AS) events?
Subscribe to the Atom feed at /pulse/bgp/moas.atom or poll the JSON endpoint at /api/pulse/bgp/moas.
