Possible BGP hijack

Beginning at 2018-11-16 13:21:55 UTC, we detected a possible BGP hijack.

Prefix 2a0b:d280::/32, is normally announced by AS41108 Hoffrath & Janssen GbR.

But beginning at 2018-11-16 13:21:55, the same prefix (2a0b:d280::/32) was also announced by ASN 49004.

This was detected by 57 BGPMon peers.

Expected
Start time: 2018-11-16 13:21:55 UTC
Expected prefix: 2a0b:d280::/32
Expected ASN: 41108 (Hoffrath & Janssen GbR)
Event Details
Detected advertisement: 2a0b:d280::/32
Detected Origin ASN 49004 (SQUAREFLOW, GB)
Detected AS Path 202365 49981 9009 49004
Detected by number of BGPMon peers: 57

Watch the replay of this event