Possible BGP hijack

Beginning at 2021-09-20 05:10:51 UTC, we detected a possible BGP hijack.

Prefix 31.14.25.0/24, is normally announced by AS39829 IRISTEL-AS, RO.

But beginning at 2021-09-20 05:10:51, the same prefix (31.14.25.0/24) was also announced by ASN 16353.

This was detected by 2 BGPMon peers.

Expected
Start time: 2021-09-20 05:10:51 UTC
Expected prefix: 31.14.25.0/24
Expected ASN: 39829 (IRISTEL-AS, RO)
Event Details
Detected advertisement: 31.14.25.0/24
Detected Origin ASN 16353 (MERULA UK Routing, GB)
Detected AS Path 31463 16353 16353 16353 16353 16353 16353 16353 16353 16353
Detected by number of BGPMon peers: 2

Watch the replay of this event

About BGPlay