Skip to main content
WorldIP.io

Pulse — MOAS conflict (multiple-origin AS)

Two or more origin ASNs announcing the same prefix while the usual origin is still active — often legitimate (anycast, multi-homing, or a migration), sometimes a misconfiguration or hijack.

⇲ Atom All feeds ←
Events last 24h
8,705
Most recent
Showing
200
Refresh
● every 60s

What is MOAS conflict (multiple-origin AS)?

A MOAS (Multiple-Origin AS) conflict is when the same IP prefix is announced into BGP by more than one origin Autonomous System at the same time. It can be benign multi-homing or anycast — or the signature of a route leak or prefix hijack. WorldIP.io flags a MOAS when a prefix with a long-stable origin (7-day, >100-sample baseline) starts being announced by a different ASN.

Geographic distribution

Flagged events

Showing 200 most recent of 8,705 · last 24h
Most recent MOAS conflict (multiple-origin AS) events detected across RIPE RIS collectors in the last 24 hours
When Severity Prefix Primary AS
Oct 13, 23:43 UTC 60 191.101.59.0/24 AS42831
Oct 13, 23:43 UTC 60 107.163.124.0/24 AS395776
Oct 13, 23:43 UTC 60 31.145.104.0/24 AS15924
Oct 13, 23:43 UTC 60 80.66.123.0/24 AS8903
Oct 13, 23:43 UTC 70 192.186.0.0/24 AS395776
Oct 13, 23:43 UTC 60 116.196.64.0/18 AS23724
Oct 13, 23:43 UTC 60 92.240.228.0/24 AS29405
Oct 13, 23:43 UTC 60 154.61.132.0/24 AS43054
Oct 13, 23:43 UTC 60 107.163.39.0/24 AS395776
Oct 13, 23:43 UTC 60 185.100.0.0/24 AS396566
Oct 13, 23:43 UTC 60 205.164.240.0/24 AS273238
Oct 13, 23:43 UTC 60 118.145.36.0/22 AS58466
Oct 13, 23:43 UTC 60 43.247.68.0/22 AS4816
Oct 13, 23:43 UTC 60 54.222.116.0/24 AS23724
Oct 13, 23:43 UTC 60 122.200.104.0/22 AS4847
Oct 13, 23:43 UTC 60 34.0.229.0/24 AS15169
Oct 13, 23:43 UTC 60 193.200.214.0/24 AS43054
Oct 13, 23:43 UTC 60 209.23.88.0/24 AS15065
Oct 13, 23:43 UTC 80 45.119.52.0/24 AS55933
Oct 13, 23:43 UTC 60 31.57.117.0/24 AS213633
Oct 13, 23:43 UTC 60 84.44.26.0/24 AS15924
Oct 13, 23:43 UTC 60 160.187.61.0/24 AS1221
Oct 13, 23:43 UTC 60 202.181.153.0/24 AS207551
Oct 13, 23:43 UTC 60 216.87.136.0/24 AS11840
Oct 13, 23:43 UTC 60 64.137.125.0/24 AS3320
Oct 13, 23:43 UTC 60 116.89.241.0/24 AS150706
Oct 13, 23:43 UTC 60 197.93.132.0/24 AS5713
Oct 13, 23:43 UTC 60 34.190.96.0/21 AS15169
Oct 13, 23:43 UTC 60 23.252.77.0/24 AS19257
Oct 13, 23:43 UTC 60 156.154.110.0/23 AS399153
Oct 13, 23:43 UTC 60 45.171.1.0/24 AS268180
Oct 13, 23:43 UTC 60 35.210.0.0/16 AS15169
Oct 13, 23:43 UTC 60 63.222.49.0/24 AS3491
Oct 13, 23:43 UTC 60 177.53.204.0/22 AS262483
Oct 13, 23:43 UTC 60 120.49.192.0/22 AS38283
Oct 13, 23:43 UTC 60 200.57.93.0/24 AS22908
Oct 13, 23:43 UTC 60 64.192.54.0/24 AS7856
Oct 13, 23:43 UTC 60 165.140.13.0/24 AS400215
Oct 13, 23:43 UTC 60 5.255.255.0/24 AS208398
Oct 13, 23:43 UTC 60 38.236.128.0/19 AS52772
Oct 13, 23:43 UTC 60 107.163.24.0/24 AS395776
Oct 13, 23:43 UTC 70 185.90.5.0/24 AS34987
Oct 13, 23:43 UTC 60 119.254.0.0/17 AS23724
Oct 13, 23:43 UTC 60 152.65.231.0/24 AS15169
Oct 13, 23:43 UTC 80 185.239.40.70/32 AS20804
Oct 13, 23:43 UTC 60 110.43.56.0/21 AS58466
Oct 13, 23:43 UTC 60 1.32.226.0/24 AS64050
Oct 13, 23:43 UTC 60 102.36.221.0/24 AS15399
Oct 13, 23:43 UTC 60 185.93.200.0/22 AS197524
Oct 13, 23:43 UTC 60 63.223.22.0/24 AS31713
Oct 13, 23:43 UTC 60 34.3.76.0/22 AS43515
Oct 13, 23:43 UTC 60 177.190.147.0/24 AS263456
Oct 13, 23:43 UTC 60 185.75.169.0/24 AS20284
Oct 13, 23:43 UTC 60 120.133.238.0/24 AS4811
Oct 13, 23:43 UTC 60 117.48.234.0/24 AS58466
Oct 13, 23:43 UTC 60 63.217.20.0/22 AS31713
Oct 13, 23:43 UTC 60 103.155.64.0/24 AS142381
Oct 13, 23:43 UTC 60 119.254.56.0/21 AS23724
Oct 13, 23:43 UTC 60 177.130.116.0/24 AS22381
Oct 13, 23:43 UTC 60 192.30.45.0/24 AS396549
Oct 13, 23:43 UTC 70 103.138.92.0/24 AS131655
Oct 13, 23:43 UTC 60 177.4.92.0/24 AS137535
Oct 13, 23:43 UTC 60 212.121.32.0/19 AS12536
Oct 13, 23:43 UTC 60 219.232.112.0/24 AS4847
Oct 13, 23:43 UTC 70 195.46.133.0/24 AS15924
Oct 13, 23:43 UTC 60 63.223.51.0/24 AS31713
Oct 13, 23:43 UTC 60 213.9.245.0/24 AS8903
Oct 13, 23:43 UTC 60 192.58.128.0/24 AS396748
Oct 13, 23:43 UTC 60 114.112.96.0/22 AS23724
Oct 13, 23:43 UTC 60 85.54.16.0/21 AS12479
Oct 13, 23:43 UTC 80 14.1.96.0/23 AS55933
Oct 13, 23:43 UTC 60 199.7.71.0/24 AS396549
Oct 13, 23:43 UTC 60 181.233.126.0/24 AS64160
Oct 13, 23:43 UTC 70 197.101.220.0/22 AS20011
Oct 13, 23:43 UTC 60 154.62.65.0/24 AS8903
Oct 13, 23:43 UTC 60 143.68.12.0/23 AS1600
Oct 13, 23:43 UTC 60 38.45.216.0/24 AS401944
Oct 13, 23:43 UTC 70 202.75.28.0/23 AS138871
Oct 13, 23:43 UTC 60 34.191.16.0/21 AS43515
Oct 13, 23:43 UTC 70 177.2.178.0/24 AS140227
Oct 13, 23:43 UTC 60 63.222.147.0/24 AS31713
Oct 13, 23:43 UTC 60 122.200.82.0/24 AS4847
Oct 13, 23:43 UTC 60 198.184.150.0/24 AS33287
Oct 13, 23:43 UTC 60 203.95.128.0/23 AS4847
Oct 13, 23:43 UTC 60 177.1.201.0/24 AS219498
Oct 13, 23:43 UTC 60 102.176.92.0/24 AS29614
Oct 13, 23:43 UTC 80 45.221.116.0/22 AS55933
Oct 13, 23:43 UTC 60 102.222.74.0/24 AS328754
Oct 13, 23:43 UTC 60 192.55.83.0/24 AS396566
Oct 13, 23:43 UTC 60 129.220.23.0/24 AS2021
Oct 13, 23:43 UTC 60 185.135.18.0/24 AS28889
Oct 13, 23:43 UTC 60 219.232.124.0/24 AS4847
Oct 13, 23:43 UTC 60 23.26.249.0/24 AS199737
Oct 13, 23:43 UTC 60 103.91.48.0/24 AS136680
Oct 13, 23:43 UTC 60 131.221.68.0/22 AS271724
Oct 13, 23:43 UTC 60 102.208.81.0/24 AS329469
Oct 13, 23:43 UTC 60 78.17.83.0/24 AS30058
Oct 13, 23:43 UTC 60 116.198.176.0/22 AS4811
Oct 13, 23:43 UTC 60 63.218.124.0/23 AS31713
Oct 13, 23:43 UTC 60 35.213.0.0/17 AS19527
Oct 13, 23:43 UTC 60 192.210.7.0/24 AS852
Oct 13, 23:43 UTC 60 185.243.84.0/23 AS213075
Oct 13, 23:43 UTC 60 64.41.94.0/23 AS3064
Oct 13, 23:43 UTC 60 192.68.126.0/24 AS19836
Oct 13, 23:43 UTC 80 138.94.8.1/32 AS264409
Oct 13, 23:43 UTC 60 38.9.210.0/23 AS273755
Oct 13, 23:43 UTC 60 38.47.132.0/24 AS147019
Oct 13, 23:43 UTC 70 188.79.128.0/24 AS12479
Oct 13, 23:43 UTC 60 167.244.212.0/24 AS13536
Oct 13, 23:43 UTC 60 192.42.176.0/24 AS396549
Oct 13, 23:43 UTC 60 148.62.86.0/24 AS33070
Oct 13, 23:43 UTC 60 147.75.68.0/22 AS15830
Oct 13, 23:43 UTC 60 43.255.200.0/23 AS4808
Oct 13, 23:43 UTC 70 38.19.209.0/24 AS274165
Oct 13, 23:43 UTC 70 112.73.54.0/24 AS9304
Oct 13, 23:43 UTC 60 34.112.0.0/16 AS43515
Oct 13, 23:43 UTC 60 197.93.178.0/24 AS20011
Oct 13, 23:43 UTC 60 196.13.136.0/24 AS327753
Oct 13, 23:43 UTC 60 35.206.6.0/24 AS43515
Oct 13, 23:43 UTC 60 81.27.248.0/24 AS57304
Oct 13, 23:43 UTC 60 197.89.247.0/24 AS5713
Oct 13, 23:43 UTC 70 95.16.8.0/23 AS12479
Oct 13, 23:43 UTC 80 197.158.241.0/24 AS37343
Oct 13, 23:43 UTC 80 168.0.0.0/24 AS265240
Oct 13, 23:43 UTC 60 152.65.244.0/24 AS19527
Oct 13, 23:43 UTC 70 85.93.31.0/24 AS12586
Oct 13, 23:43 UTC 60 1.2.4.0/24 AS24151
Oct 13, 23:43 UTC 70 94.183.223.0/24 AS213915
Oct 13, 23:43 UTC 60 197.89.130.0/24 AS20011
Oct 13, 23:43 UTC 60 148.59.168.0/24 AS203
Oct 13, 23:43 UTC 60 52.82.164.0/24 AS9808
Oct 13, 23:43 UTC 60 23.172.217.0/24 AS400992
Oct 13, 23:43 UTC 60 125.208.36.0/24 AS24409
Oct 13, 23:43 UTC 60 179.3.134.0/23 AS6535
Oct 13, 23:43 UTC 60 198.41.0.0/24 AS396549
Oct 13, 23:43 UTC 60 185.77.0.0/24 AS15924
Oct 13, 23:43 UTC 60 209.73.147.0/24 AS3561
Oct 13, 23:43 UTC 60 154.56.215.0/24 AS52164
Oct 13, 23:43 UTC 70 189.89.253.0/24 AS272772
Oct 13, 23:43 UTC 60 88.133.128.0/20 AS197524
Oct 13, 23:43 UTC 60 34.3.16.0/23 AS43515
Oct 13, 23:43 UTC 60 69.80.130.0/24 AS395597
Oct 13, 23:43 UTC 60 91.196.184.0/22 AS4455
Oct 13, 23:43 UTC 60 222.126.240.0/23 AS7468
Oct 13, 23:43 UTC 60 38.45.121.0/24 AS9294
Oct 13, 23:43 UTC 60 27.121.109.0/24 AS56111
Oct 13, 23:43 UTC 60 149.5.36.0/22 AS206723
Oct 13, 23:43 UTC 70 83.98.144.0/22 AS8315
Oct 13, 23:43 UTC 60 34.191.0.0/21 AS43515
Oct 13, 23:43 UTC 80 148.145.178.0/23 AS136907
Oct 13, 23:43 UTC 70 45.116.76.0/22 AS55933
Oct 13, 23:43 UTC 60 177.2.188.0/24 AS137535
Oct 13, 23:43 UTC 60 91.106.240.0/20 AS15924
Oct 13, 23:43 UTC 60 198.135.250.0/24 AS18697
Oct 13, 23:43 UTC 60 176.122.207.0/24 AS58006
Oct 13, 23:43 UTC 60 63.222.68.0/24 AS31713
Oct 13, 23:43 UTC 70 200.193.48.0/21 AS8167
Oct 13, 23:43 UTC 70 93.156.128.0/18 AS12946
Oct 13, 23:43 UTC 60 34.4.32.0/19 AS15169
Oct 13, 23:43 UTC 60 23.230.32.0/24 AS47553
Oct 13, 23:43 UTC 60 103.179.71.0/24 AS149341
Oct 13, 23:43 UTC 80 201.3.24.0/21 AS8167
Oct 13, 23:43 UTC 60 103.169.158.0/24 AS140228
Oct 13, 23:43 UTC 70 31.145.128.0/17 AS15924
Oct 13, 23:43 UTC 60 195.234.216.0/22 AS25081
Oct 13, 23:43 UTC 60 2.27.196.0/22 AS3257
Oct 13, 23:43 UTC 60 195.178.143.0/24 AS30058
Oct 13, 23:43 UTC 60 116.89.242.0/24 AS150706
Oct 13, 23:43 UTC 70 38.213.167.0/24 AS984
Oct 13, 23:43 UTC 60 38.188.76.0/24 AS138754
Oct 13, 23:43 UTC 60 38.47.193.0/24 AS137535
Oct 13, 23:43 UTC 60 46.18.168.0/21 AS4455
Oct 13, 23:43 UTC 70 95.16.168.0/22 AS12479
Oct 13, 23:43 UTC 60 52.82.185.0/24 AS9808
Oct 13, 23:43 UTC 60 54.222.115.0/24 AS23724
Oct 13, 23:43 UTC 60 34.191.8.0/21 AS43515
Oct 13, 23:43 UTC 60 197.89.13.0/24 AS20011
Oct 13, 23:43 UTC 60 177.4.86.0/24 AS137535
Oct 13, 23:43 UTC 60 81.8.76.0/22 AS15924
Oct 13, 23:43 UTC 60 156.154.94.0/23 AS399161
Oct 13, 23:43 UTC 60 103.196.88.0/21 AS4847
Oct 13, 23:43 UTC 60 124.251.110.0/23 AS9308
Oct 13, 23:43 UTC 60 103.108.49.0/24 AS137422
Oct 13, 23:43 UTC 60 179.3.146.0/23 AS6535
Oct 13, 23:43 UTC 60 103.135.118.0/24 AS150288
Oct 13, 23:43 UTC 60 103.76.220.0/22 AS4847
Oct 13, 23:43 UTC 60 38.213.163.0/24 AS174
Oct 13, 23:43 UTC 60 185.100.0.0/24 AS396566
Oct 13, 23:43 UTC 60 123.103.13.0/24 AS23724
Oct 13, 23:43 UTC 60 215.69.245.0/24 AS149
Oct 13, 23:43 UTC 60 63.218.214.0/23 AS31713
Oct 13, 23:43 UTC 70 194.225.150.0/24 AS6736
Oct 13, 23:43 UTC 60 185.75.170.0/23 AS20284
Oct 13, 23:43 UTC 60 34.191.56.0/21 AS43515
Oct 13, 23:43 UTC 60 177.2.189.0/24 AS137535
Oct 13, 23:43 UTC 60 31.217.135.0/24 AS4455
Oct 13, 23:43 UTC 60 125.208.7.0/24 AS4847
Oct 13, 23:43 UTC 60 175.102.178.0/24 AS4847
Oct 13, 23:43 UTC 60 63.223.11.0/24 AS31713
Oct 13, 23:43 UTC 60 216.177.9.0/24 AS63009

Frequently Asked Questions

What is a BGP MOAS conflict (multiple-origin AS)?

A MOAS (Multiple-Origin AS) conflict is when the same IP prefix is announced into BGP by more than one origin Autonomous System at the same time. It can be benign multi-homing or anycast — or the signature of a route leak or prefix hijack. WorldIP.io flags a MOAS when a prefix with a long-stable origin (7-day, >100-sample baseline) starts being announced by a different ASN.

Where does this data come from?

Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.

How often is the MOAS conflict (multiple-origin AS) feed updated?

The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-10-13 23:50 UTC.

How do I subscribe to MOAS conflict (multiple-origin AS) events?

Subscribe to the Atom feed at /pulse/bgp/moas.atom or poll the JSON endpoint at /api/pulse/bgp/moas.

Share