Skip to main content
WorldIP.io

Pulse — MOAS conflict (multiple-origin AS)

Two or more origin ASNs announcing the same prefix while the usual origin is still active — often legitimate (anycast, multi-homing, or a migration), sometimes a misconfiguration or hijack.

⇲ Atom All feeds ←
Events last 24h
9,792
Most recent
Showing
200
Refresh
● every 60s

What is MOAS conflict (multiple-origin AS)?

A MOAS (Multiple-Origin AS) conflict is when the same IP prefix is announced into BGP by more than one origin Autonomous System at the same time. It can be benign multi-homing or anycast — or the signature of a route leak or prefix hijack. WorldIP.io flags a MOAS when a prefix with a long-stable origin (7-day, >100-sample baseline) starts being announced by a different ASN.

Geographic distribution

Flagged events

Showing 200 most recent of 9,792 · last 24h
Most recent MOAS conflict (multiple-origin AS) events detected across RIPE RIS collectors in the last 24 hours
When Severity Prefix Primary AS
Oct 17, 03:14 UTC 60 159.49.241.0/24 AS29750
Oct 17, 03:14 UTC 60 67.221.16.0/20 AS11584
Oct 17, 03:14 UTC 60 193.142.108.0/23 AS10753
Oct 17, 03:14 UTC 60 63.216.150.0/24 AS31713
Oct 17, 03:14 UTC 60 192.68.130.0/24 AS396549
Oct 17, 03:14 UTC 60 143.212.118.0/24 AS1602
Oct 17, 03:14 UTC 80 216.168.228.0/24 AS19836
Oct 17, 03:14 UTC 60 217.196.64.0/20 AS202664
Oct 17, 03:14 UTC 60 72.5.161.0/24 AS14636
Oct 17, 03:14 UTC 70 194.247.59.0/24 AS34984
Oct 17, 03:14 UTC 60 192.52.178.0/24 AS396566
Oct 17, 03:14 UTC 60 115.84.166.0/24 AS17574
Oct 17, 03:14 UTC 60 103.110.221.0/24 AS137535
Oct 17, 03:14 UTC 60 154.94.42.0/24 AS62240
Oct 17, 03:14 UTC 60 117.48.156.0/22 AS140292
Oct 17, 03:14 UTC 60 185.242.157.0/24 AS42831
Oct 17, 03:14 UTC 60 192.34.234.0/24 AS36631
Oct 17, 03:14 UTC 60 185.26.155.0/24 AS12684
Oct 17, 03:14 UTC 60 193.105.40.0/24 AS196695
Oct 17, 03:14 UTC 60 103.91.176.0/24 AS4847
Oct 17, 03:14 UTC 60 54.222.116.0/24 AS23724
Oct 17, 03:14 UTC 60 118.145.36.0/22 AS58466
Oct 17, 03:14 UTC 60 41.79.249.0/24 AS31713
Oct 17, 03:14 UTC 60 63.222.200.0/24 AS31713
Oct 17, 03:14 UTC 60 38.59.231.0/24 AS41378
Oct 17, 03:14 UTC 60 38.51.239.0/24 AS271907
Oct 17, 03:14 UTC 60 185.108.92.0/24 AS205402
Oct 17, 03:14 UTC 60 57.140.209.0/24 AS15169
Oct 17, 03:14 UTC 60 118.196.56.0/21 AS4811
Oct 17, 03:14 UTC 60 102.220.88.0/22 AS55933
Oct 17, 03:14 UTC 60 14.103.120.0/21 AS4811
Oct 17, 03:14 UTC 80 0.0.0.0/0 AS174
Oct 17, 03:14 UTC 60 192.173.65.0/24 AS55095
Oct 17, 03:14 UTC 80 209.146.115.0/24 AS967
Oct 17, 03:14 UTC 70 6.44.68.0/22 AS367
Oct 17, 03:14 UTC 60 221.122.64.0/20 AS23724
Oct 17, 03:14 UTC 60 64.93.29.0/24 AS40605
Oct 17, 03:14 UTC 60 170.140.99.0/24 AS3512
Oct 17, 03:14 UTC 60 85.56.240.0/20 AS12479
Oct 17, 03:14 UTC 60 83.118.224.0/22 AS209242
Oct 17, 03:14 UTC 60 103.3.212.0/24 AS38149
Oct 17, 03:14 UTC 60 170.46.155.0/24 AS18697
Oct 17, 03:14 UTC 60 208.108.79.0/24 AS600
Oct 17, 03:14 UTC 60 128.65.136.0/21 AS44266
Oct 17, 03:14 UTC 70 154.37.217.0/24 AS979
Oct 17, 03:14 UTC 60 101.52.239.0/24 AS4816
Oct 17, 03:14 UTC 60 24.248.247.0/24 AS19905
Oct 17, 03:14 UTC 60 42.240.160.0/20 AS58466
Oct 17, 03:14 UTC 60 197.93.189.0/24 AS5713
Oct 17, 03:14 UTC 60 195.49.142.0/24 AS31216
Oct 17, 03:14 UTC 60 170.168.20.0/24 AS43278
Oct 17, 03:14 UTC 70 210.87.122.0/24 AS131769
Oct 17, 03:14 UTC 60 204.74.104.0/23 AS399161
Oct 17, 03:14 UTC 70 45.185.44.0/23 AS269357
Oct 17, 03:14 UTC 60 52.82.188.0/24 AS9808
Oct 17, 03:14 UTC 60 189.39.218.0/23 AS265303
Oct 17, 03:14 UTC 60 212.163.8.0/24 AS12541
Oct 17, 03:14 UTC 60 34.190.48.0/21 AS15169
Oct 17, 03:14 UTC 60 93.88.176.0/20 AS44868
Oct 17, 03:14 UTC 60 63.223.51.0/24 AS31713
Oct 17, 03:14 UTC 60 181.119.118.0/24 AS52468
Oct 17, 03:14 UTC 60 156.238.233.0/24 AS401701
Oct 17, 03:14 UTC 60 201.50.114.0/24 AS214833
Oct 17, 03:14 UTC 60 208.52.177.0/24 AS400196
Oct 17, 03:14 UTC 60 123.59.192.0/19 AS23724
Oct 17, 03:14 UTC 60 197.89.115.0/24 AS5713
Oct 17, 03:14 UTC 60 202.90.96.0/22 AS4811
Oct 17, 03:14 UTC 60 154.196.252.0/24 AS41095
Oct 17, 03:14 UTC 60 207.135.220.0/23 AS397782
Oct 17, 03:14 UTC 70 185.242.38.0/23 AS133606
Oct 17, 03:14 UTC 60 38.130.80.0/22 AS21788
Oct 17, 03:14 UTC 60 190.115.209.0/24 AS274664
Oct 17, 03:14 UTC 60 34.190.160.0/21 AS19527
Oct 17, 03:14 UTC 60 155.28.22.0/24 AS1516
Oct 17, 03:14 UTC 60 203.196.0.0/23 AS9308
Oct 17, 03:14 UTC 60 145.40.80.0/23 AS15830
Oct 17, 03:14 UTC 70 158.14.118.0/23 AS367
Oct 17, 03:14 UTC 60 63.223.144.0/24 AS31713
Oct 17, 03:14 UTC 60 38.203.0.0/22 AS9009
Oct 17, 03:14 UTC 60 170.33.66.0/24 AS134963
Oct 17, 03:14 UTC 70 201.3.121.0/24 AS209866
Oct 17, 03:14 UTC 60 118.196.48.0/21 AS4811
Oct 17, 03:14 UTC 60 74.116.139.0/24 AS23096
Oct 17, 03:14 UTC 70 192.42.176.0/24 AS396549
Oct 17, 03:14 UTC 60 205.70.192.0/20 AS5839
Oct 17, 03:14 UTC 60 90.165.104.0/22 AS12479
Oct 17, 03:14 UTC 60 162.8.230.0/24 AS3145
Oct 17, 03:14 UTC 60 193.46.133.0/24 AS1921
Oct 17, 03:14 UTC 60 223.31.200.0/24 AS152144
Oct 17, 03:14 UTC 60 151.247.1.0/24 AS216174
Oct 17, 03:14 UTC 60 95.16.35.0/24 AS12479
Oct 17, 03:14 UTC 60 148.62.86.0/24 AS33070
Oct 17, 03:14 UTC 60 192.33.14.0/24 AS396748
Oct 17, 03:14 UTC 60 198.160.150.0/24 AS4867
Oct 17, 03:14 UTC 60 165.98.100.0/24 AS267797
Oct 17, 03:14 UTC 60 206.191.180.0/22 AS14636
Oct 17, 03:14 UTC 60 38.253.90.0/24 AS272027
Oct 17, 03:14 UTC 60 120.131.0.0/23 AS59019
Oct 17, 03:14 UTC 60 192.173.102.0/24 AS2906
Oct 17, 03:14 UTC 70 6.44.0.0/22 AS367
Oct 17, 03:14 UTC 60 120.92.8.0/23 AS23724
Oct 17, 03:14 UTC 60 71.18.123.0/24 AS396986
Oct 17, 03:14 UTC 60 103.125.173.0/24 AS139415
Oct 17, 03:14 UTC 60 108.175.219.0/24 AS54706
Oct 17, 03:14 UTC 60 176.118.50.0/24 AS198820
Oct 17, 03:14 UTC 70 141.140.15.0/24 AS204765
Oct 17, 03:14 UTC 60 202.136.212.0/22 AS4812
Oct 17, 03:14 UTC 60 101.53.254.0/24 AS9541
Oct 17, 03:14 UTC 60 202.90.104.0/22 AS4811
Oct 17, 03:14 UTC 60 103.168.230.0/23 AS41095
Oct 17, 03:14 UTC 60 185.2.248.0/22 AS31147
Oct 17, 03:14 UTC 60 72.4.130.0/23 AS3064
Oct 17, 03:14 UTC 60 206.191.182.0/23 AS14636
Oct 17, 03:14 UTC 60 223.196.147.0/24 AS55410
Oct 17, 03:14 UTC 60 63.222.36.0/24 AS31713
Oct 17, 03:14 UTC 60 154.44.9.0/24 AS979
Oct 17, 03:14 UTC 60 168.228.28.0/22 AS264903
Oct 17, 03:14 UTC 60 118.196.0.0/21 AS4811
Oct 17, 03:14 UTC 60 103.202.120.0/22 AS4811
Oct 17, 03:14 UTC 60 198.89.47.0/24 AS40824
Oct 17, 03:14 UTC 60 197.93.153.0/24 AS5713
Oct 17, 03:14 UTC 60 211.85.0.0/16 AS4538
Oct 17, 03:14 UTC 70 41.79.60.0/23 AS37343
Oct 17, 03:14 UTC 60 63.222.45.0/24 AS31713
Oct 17, 03:14 UTC 70 158.14.236.0/23 AS367
Oct 17, 03:14 UTC 80 81.177.188.0/22 AS48176
Oct 17, 03:14 UTC 60 195.49.184.0/22 AS44266
Oct 17, 03:14 UTC 60 107.6.119.0/24 AS14636
Oct 17, 03:14 UTC 60 118.197.48.0/21 AS4811
Oct 17, 03:14 UTC 60 35.219.128.0/18 AS43515
Oct 17, 03:14 UTC 70 188.78.123.0/24 AS12479
Oct 17, 03:14 UTC 60 103.89.248.0/24 AS136099
Oct 17, 03:14 UTC 60 219.232.112.0/24 AS4847
Oct 17, 03:14 UTC 60 212.121.32.0/19 AS12536
Oct 17, 03:14 UTC 60 177.130.116.0/24 AS22381
Oct 17, 03:14 UTC 60 119.254.56.0/21 AS23724
Oct 17, 03:14 UTC 70 158.14.164.0/23 AS367
Oct 17, 03:14 UTC 60 63.217.20.0/22 AS31713
Oct 17, 03:14 UTC 60 117.48.234.0/24 AS58466
Oct 17, 03:14 UTC 60 120.133.238.0/24 AS4811
Oct 17, 03:14 UTC 60 1.2.4.0/24 AS24151
Oct 17, 03:14 UTC 60 177.190.147.0/24 AS263456
Oct 17, 03:14 UTC 60 34.3.76.0/22 AS43515
Oct 17, 03:14 UTC 60 185.93.200.0/22 AS197524
Oct 17, 03:14 UTC 70 182.176.32.0/24 AS17557
Oct 17, 03:14 UTC 60 63.223.22.0/24 AS31713
Oct 17, 03:14 UTC 60 1.32.226.0/24 AS64050
Oct 17, 03:14 UTC 60 110.43.56.0/21 AS58466
Oct 17, 03:14 UTC 70 154.208.64.0/24 AS17561
Oct 17, 03:14 UTC 60 152.65.231.0/24 AS15169
Oct 17, 03:14 UTC 60 119.254.0.0/17 AS23724
Oct 17, 03:14 UTC 60 38.236.128.0/19 AS52772
Oct 17, 03:14 UTC 60 198.73.135.0/24 AS806
Oct 17, 03:14 UTC 60 5.255.255.0/24 AS208398
Oct 17, 03:14 UTC 60 165.140.13.0/24 AS400215
Oct 17, 03:14 UTC 60 64.192.54.0/24 AS7856
Oct 17, 03:14 UTC 60 120.49.192.0/22 AS38283
Oct 17, 03:14 UTC 60 63.222.49.0/24 AS3491
Oct 17, 03:14 UTC 60 35.210.0.0/16 AS15169
Oct 17, 03:14 UTC 60 156.154.110.0/23 AS399153
Oct 17, 03:14 UTC 60 85.49.32.0/19 AS12479
Oct 17, 03:14 UTC 60 23.252.77.0/24 AS19257
Oct 17, 03:14 UTC 60 34.190.96.0/21 AS15169
Oct 17, 03:14 UTC 60 197.93.132.0/24 AS5713
Oct 17, 03:14 UTC 60 116.89.241.0/24 AS150706
Oct 17, 03:14 UTC 60 64.137.125.0/24 AS3320
Oct 17, 03:14 UTC 60 216.87.136.0/24 AS11840
Oct 17, 03:14 UTC 60 202.181.153.0/24 AS207551
Oct 17, 03:14 UTC 60 160.187.61.0/24 AS1221
Oct 17, 03:14 UTC 60 209.23.88.0/24 AS15065
Oct 17, 03:14 UTC 60 197.89.210.0/24 AS20011
Oct 17, 03:14 UTC 60 193.200.214.0/24 AS43054
Oct 17, 03:14 UTC 60 192.82.134.0/24 AS396549
Oct 17, 03:14 UTC 60 122.200.104.0/22 AS4847
Oct 17, 03:14 UTC 60 34.0.229.0/24 AS15169
Oct 17, 03:14 UTC 60 54.222.116.0/24 AS23724
Oct 17, 03:14 UTC 60 43.247.68.0/22 AS4816
Oct 17, 03:14 UTC 60 118.145.36.0/22 AS58466
Oct 17, 03:14 UTC 60 205.164.240.0/24 AS273238
Oct 17, 03:14 UTC 70 6.66.37.0/24 AS367
Oct 17, 03:14 UTC 60 208.108.244.0/22 AS600
Oct 17, 03:14 UTC 60 185.100.0.0/24 AS396566
Oct 17, 03:14 UTC 60 31.77.188.0/24 AS199417
Oct 17, 03:14 UTC 60 154.61.132.0/24 AS43054
Oct 17, 03:14 UTC 60 92.240.228.0/24 AS29405
Oct 17, 03:14 UTC 60 116.196.64.0/18 AS23724
Oct 17, 03:14 UTC 60 85.56.176.0/22 AS12479
Oct 17, 03:14 UTC 70 192.186.0.0/24 AS395776
Oct 17, 03:14 UTC 60 80.66.123.0/24 AS8903
Oct 17, 03:14 UTC 60 107.163.124.0/24 AS395776
Oct 17, 03:14 UTC 60 38.125.235.0/24 AS395111
Oct 17, 03:14 UTC 60 155.103.190.0/24 AS25957
Oct 17, 03:14 UTC 60 167.86.47.0/24 AS48851
Oct 17, 03:14 UTC 60 187.62.192.0/24 AS262617
Oct 17, 03:14 UTC 60 38.46.11.0/24 AS9294
Oct 17, 03:14 UTC 60 176.59.122.0/23 AS39374
Oct 17, 03:14 UTC 60 154.12.190.0/23 AS32519
Oct 17, 03:14 UTC 60 54.222.115.0/24 AS23724
Oct 17, 03:14 UTC 60 38.57.116.0/24 AS999
Oct 17, 03:14 UTC 60 144.249.190.0/24 AS25773

Frequently Asked Questions

What is a BGP MOAS conflict (multiple-origin AS)?

A MOAS (Multiple-Origin AS) conflict is when the same IP prefix is announced into BGP by more than one origin Autonomous System at the same time. It can be benign multi-homing or anycast — or the signature of a route leak or prefix hijack. WorldIP.io flags a MOAS when a prefix with a long-stable origin (7-day, >100-sample baseline) starts being announced by a different ASN.

Where does this data come from?

Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.

How often is the MOAS conflict (multiple-origin AS) feed updated?

The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-10-17 03:15 UTC.

How do I subscribe to MOAS conflict (multiple-origin AS) events?

Subscribe to the Atom feed at /pulse/bgp/moas.atom or poll the JSON endpoint at /api/pulse/bgp/moas.

Share