Possible BGP hijack

Beginning at 2017-04-15 16:20:09 UTC, we detected a possible BGP hijack.

Prefix 185.144.100.0/24, is normally announced by AS57878 Prager NCC KG.

But beginning at 2017-04-15 16:20:09, the same prefix (185.144.100.0/24) was also announced by ASN 395970.

This was detected by 168 BGPMon peers.

Expected
Start time: 2017-04-15 16:20:09 UTC
Expected prefix: 185.144.100.0/24
Expected ASN: 57878 (Prager NCC KG)
Event Details
Detected advertisement: 185.144.100.0/24
Detected Origin ASN 395970 (IONSWITCH)
Detected AS Path 49964 1299 23033 201106 201106 201106 201106 201106 201106 395970
Detected by number of BGPMon peers: 168

Watch the replay of this event