Possible BGP hijack

Beginning at 2017-03-29 05:12:28 UTC, we detected a possible BGP hijack.

Prefix 81.12.123.0/24, is normally announced by AS199849 Gostaresh Etrtebatate Apadana Ltd..

But beginning at 2017-03-29 05:12:28, the same prefix (81.12.123.0/24) was also announced by ASN 3852.

This was detected by 167 BGPMon peers.

Expected
Start time: 2017-03-29 05:12:28 UTC
Expected prefix: 81.12.123.0/24
Expected ASN: 199849 (Gostaresh Etrtebatate Apadana Ltd.)
Event Details
Detected advertisement: 81.12.123.0/24
Detected Origin ASN 3852 (Sohanet)
Detected AS Path 1798 174 29049 12880 42337 51541 3852
Detected by number of BGPMon peers: 167

Watch the replay of this event