Possible BGP hijack

Beginning at 2017-11-14 11:13:35 UTC, we detected a possible BGP hijack.

Prefix 116.144.0.0/16, is normally announced by AS5998 DoD Network Information Center.

But beginning at 2017-11-14 11:13:35, the same prefix (116.144.0.0/16) was also announced by ASN 6589.

This was detected by 7 BGPMon peers.

Expected
Start time: 2017-11-14 11:13:35 UTC
Expected prefix: 116.144.0.0/16
Expected ASN: 5998 (DoD Network Information Center)
Event Details
Detected advertisement: 116.144.0.0/16
Detected Origin ASN 6589 (BTCPROD)
Detected AS Path 1103 203040 6589
Detected by number of BGPMon peers: 7

Watch the replay of this event