Possible BGP hijack

Beginning at 2017-11-14 11:13:35 UTC, we detected a possible BGP hijack.

Prefix 116.135.0.0/16, is normally announced by AS5998 Unknown.

But beginning at 2017-11-14 11:13:35, the same prefix (116.135.0.0/16) was also announced by ASN 6589.

This was detected by 7 BGPMon peers.

Expected
Start time: 2017-11-14 11:13:35 UTC
Expected prefix: 116.135.0.0/16
Expected ASN: 5998 (Unknown)
Event Details
Detected advertisement: 116.135.0.0/16
Detected Origin ASN 6589 (Unknown)
Detected AS Path 49463 203040 6589
Detected by number of BGPMon peers: 7

Watch the replay of this event