Possible BGP hijack

Beginning at 2018-05-29 08:09:45 UTC, we detected a possible BGP hijack.

Prefix 1.1.1.0/24, is normally announced by AS13335 Cloudflare Inc.

But beginning at 2018-05-29 08:09:45, the same prefix (1.1.1.0/24) was also announced by ASN 58879.

This was detected by 14 BGPMon peers.

Expected
Start time: 2018-05-29 08:09:45 UTC
Expected prefix: 1.1.1.0/24
Expected ASN: 13335 (Cloudflare Inc)
Event Details
Detected advertisement: 1.1.1.0/24
Detected Origin ASN 58879 (Shanghai Anchang Network Security Technology Co.,Ltd.)
Detected AS Path 32764 11017 6939 58879
Detected by number of BGPMon peers: 14

Watch the replay of this event