Possible BGP hijack

Beginning at 2017-11-12 13:49:00 UTC, we detected a possible BGP hijack.

Prefix 1.1.1.0/24, is normally announced by AS4922 Shentel Communications, LLC.

But beginning at 2017-11-12 13:49:00, the same prefix (1.1.1.0/24) was also announced by ASN 30844.

This was detected by 45 BGPMon peers.

Expected
Start time: 2017-11-12 13:49:00 UTC
Expected prefix: 1.1.1.0/24
Expected ASN: 4922 (Shentel Communications, LLC)
Event Details
Detected advertisement: 1.1.1.0/24
Detected Origin ASN 30844 (Liquid Telecommunications Ltd)
Detected AS Path 18356 9931 4651 3491 30844
Detected by number of BGPMon peers: 45

Watch the replay of this event