Possible BGP hijack

Beginning at 2018-09-13 15:29:33 UTC, we detected a possible BGP hijack.

Prefix 2001:503:c27::/48, is normally announced by AS26415 VeriSign Global Registry Services.

But beginning at 2018-09-13 15:29:33, the same prefix (2001:503:c27::/48) was also announced by ASN 396555.

This was detected by 3 BGPMon peers.

Expected
Start time: 2018-09-13 15:29:33 UTC
Expected prefix: 2001:503:c27::/48
Expected ASN: 26415 (VeriSign Global Registry Services)
Event Details
Detected advertisement: 2001:503:c27::/48
Detected Origin ASN 396555 ()
Detected AS Path 22188 6939 7342 396555 396555
Detected by number of BGPMon peers: 3

Watch the replay of this event