Possible BGP hijack

Beginning at 2017-04-01 20:45:00 UTC, we detected a possible BGP hijack.

Prefix 221.120.220.0/24, is normally announced by AS9557 Paknet Limited Merged into PTCL.

But beginning at 2017-04-01 20:45:00, the same prefix (221.120.220.0/24) was also announced by ASN 3356.

This was detected by 61 BGPMon peers.

Expected
Start time: 2017-04-01 20:45:00 UTC
Expected prefix: 221.120.220.0/24
Expected ASN: 9557 (Paknet Limited Merged into PTCL)
Event Details
Detected advertisement: 221.120.220.0/24
Detected Origin ASN 3356 (Level 3 Communications, Inc.)
Detected AS Path 262485 263164 18881 12956 3356
Detected by number of BGPMon peers: 61

Watch the replay of this event