Pulse of the Internet — BGP Anomalies
Live log of multiple-origin conflicts: a prefix announced by an origin ASN different from its long-stable usual origin (7+ days, 100+ samples) while that usual origin is still announcing too. Most are legitimate operational re-homing, anycast or multi-homing; some are route leaks or hijacks. Powered by RIPE RIS multi-collector feeds, refreshed every 5 minutes.
Flagged announcements ● auto-refresh every 60s
Most recent first · last 24h| When | Prefix | Unexpected origin | Usual origin |
|---|
No anomalies flagged in the last 24h — global BGP is quiet, or our long-stable baseline (7-day) hasn't accumulated enough samples yet.
What "anomaly" means here
A prefix-origin pair is stable when we've seen it for at least 7 days with at least 100 announcement samples. When the same prefix is announced by a different origin ASN while its long-stable usual origin is still announcing too — a genuine multiple-origin conflict — and that pairing repeats more than 5 times in an hour across our RIS collectors, we list it. Most are legitimate: operational re-homing, anycast, or multi-homing. Only some are BGP route leaks or hijacks. Subscribe to the feed to follow in real time.