Possible BGP hijack

Beginning at 2021-11-09 00:06:15 UTC, we detected a possible BGP hijack.

Prefix 1.236.3.0/24, is normally announced by AS38390 GOEGY-AS-KR Goyang Office of Education, KR.

But beginning at 2021-11-09 00:06:15, the same prefix (1.236.3.0/24) was also announced by ASN 25478.

This was detected by 2 BGPMon peers.

Expected
Start time: 2021-11-09 00:06:15 UTC
Expected prefix: 1.236.3.0/24
Expected ASN: 38390 (GOEGY-AS-KR Goyang Office of Education, KR)
Event Details
Detected advertisement: 1.236.3.0/24
Detected Origin ASN 25478 (IHOME-AS iHome LLC, RU)
Detected AS Path 43561 25478
Detected by number of BGPMon peers: 2

Watch the replay of this event

About BGPlay