Possible BGP hijack

Beginning at 2019-02-25 05:15:01 UTC, we detected a possible BGP hijack.

Prefix 156.236.68.0/24, is normally announced by AS136970 YISUCLOUDLTD-AS-AP YISU CLOUD LTD, HK.

But beginning at 2019-02-25 05:15:01, the same prefix (156.236.68.0/24) was also announced by ASN 40065.

This was detected by 6 BGPMon peers.

Expected
Start time: 2019-02-25 05:15:01 UTC
Expected prefix: 156.236.68.0/24
Expected ASN: 136970 (YISUCLOUDLTD-AS-AP YISU CLOUD LTD, HK)
Event Details
Detected advertisement: 156.236.68.0/24
Detected Origin ASN 40065 (CNSERVERS - CNSERVERS LLC, US)
Detected AS Path 133326 4826 174 3257 40065
Detected by number of BGPMon peers: 6

Watch the replay of this event

About BGPlay