Possible BGP hijack

Beginning at 2018-11-16 16:50:23 UTC, we detected a possible BGP hijack.

Prefix 103.85.216.0/24, is normally announced by AS136268 QSR Systems Ltd..

But beginning at 2018-11-16 16:50:23, the same prefix (103.85.216.0/24) was also announced by ASN 396284.

This was detected by 3 BGPMon peers.

Expected
Start time: 2018-11-16 16:50:23 UTC
Expected prefix: 103.85.216.0/24
Expected ASN: 136268 (QSR Systems Ltd.)
Event Details
Detected advertisement: 103.85.216.0/24
Detected Origin ASN 396284 (QSRGROUP - QSR GROUP LLC., US)
Detected AS Path 202365 395970 23033 396284
Detected by number of BGPMon peers: 3

Watch the replay of this event