Possible BGP hijack

Beginning at 2018-01-10 14:43:21 UTC, we detected a possible BGP hijack.

Prefix 203.104.128.0/20, is normally announced by AS38631 LINE Corporation.

But beginning at 2018-01-10 14:43:21, the same prefix (203.104.128.0/20) was also announced by ASN 48479.

This was detected by 29 BGPMon peers.

Expected
Start time: 2018-01-10 14:43:21 UTC
Expected prefix: 203.104.128.0/20
Expected ASN: 38631 (LINE Corporation)
Event Details
Detected advertisement: 203.104.128.0/20
Detected Origin ASN 48479 (KUBAN-TELECOM Ltd.)
Detected AS Path 20634 8447 28917 48479 48479 48479
Detected by number of BGPMon peers: 29

Watch the replay of this event