94.249.222.0/23 RPKI valid MOAS
Announced by 2 different origins, which is either a deliberate multi-origin setup or a hijack.
This prefix is announced by more than one AS. Compare how many collector
peers see each origin below: a hijack is usually visible as a second
origin seen by far fewer peers than the legitimate one.
Origins
| Origin AS | RPKI | Peers seeing it | Sample path | First seen | Last seen |
|---|---|---|---|---|---|
| AS197549 GHOSTnet GmbH | RPKI valid | 42 | 20236512586197549 | 2026-09-18 | 2026-10-24 |
| AS12586 GHOSTnet GmbH | RPKI valid | 1 | 5782112586 | 2026-10-23 | 2026-10-24 |
RPKI
2 ROAs cover this prefix
Registry
Who this address space is delegated to, regardless of whether it is routed
- Delegated block
- 94.249.128.0/17
- RIR
- RIPENCC
- Country
- 🇩🇪 DE
- Status
- allocated
- Allocated
- 2008-09-18
Less specific routes
Announced prefixes that contain this one
| Prefix | Origin | RPKI | Peers | Sample path | First seen |
|---|---|---|---|---|---|
| 94.249.128.0/17 v4 | AS12586 GHOSTnet GmbH | RPKI valid | 44 | 20236512586 | 2026-09-18 |
More specific routes
0 announced prefixes inside this one
Nothing more specific is announced.
Recorded changes
| When | Change | Origin | Path |
|---|---|---|---|
| 2026-10-23 10:49:10Z | origin change | AS12586 → AS197549 | 20236512586197549 |
| 2026-10-23 09:21:58Z | origin change | AS197549 → AS12586 | 5782112586 |
| 2026-10-22 03:20:04Z | origin change | AS12586 → AS197549 | 17639693912586197549 |
| 2026-10-22 02:16:59Z | origin change | AS197549 → AS12586 | 5782112586 |