Possible BGP hijack

Beginning at 2017-04-03 08:51:23, we detected a possible BGP hijack.

Prefix 2620:0:1c00::/40, Normally announced by AS32934 Facebook, Inc.

Starting at 2017-04-03 08:51:23, a more specific route (2620:0:1cff:dead:beee::26a/127) was announced by ASN 12849.

This was detected by 4 BGPMon peers.

Expected
Start time: 2017-04-03 08:51:23 UTC
Expected prefix: 2620:0:1c00::/40
Expected ASN: 32934 (Facebook, Inc.)
Event Details
Detected advertisement: 2620:0:1cff:dead:beee::26a/127
Detected Origin ASN 12849 (Hot-Net internet services Ltd.)
Detected AS Path 3277 3267 12849
Detected by number of BGPMon peers: 4

Watch the replay of this event