Possible BGP hijack

Beginning at 2021-01-14 10:06:07 UTC, we detected a possible BGP hijack.

Prefix 2607:f5b5:2::/48, is normally announced by AS28753 LEASEWEB-DE-FRA-10, DE.

But beginning at 2021-01-14 10:06:07, the same prefix (2607:f5b5:2::/48) was also announced by ASN 396362.

This was detected by 4 BGPMon peers.

Expected
Start time: 2021-01-14 10:06:07 UTC
Expected prefix: 2607:f5b5:2::/48
Expected ASN: 28753 (LEASEWEB-DE-FRA-10, DE)
Event Details
Detected advertisement: 2607:f5b5:2::/48
Detected Origin ASN 396362 (LEASEWEB-USA-NYC-11, US)
Detected AS Path 15296 6509 6939 3257 396362
Detected by number of BGPMon peers: 4

Watch the replay of this event

About BGPlay