Possible BGP hijack

Beginning at 2017-07-13 19:59:28 UTC, we detected a possible BGP hijack.

Prefix 188.253.126.0/24, is normally announced by AS3852 Sohanet.

But beginning at 2017-07-13 19:59:28, the same prefix (188.253.126.0/24) was also announced by ASN 12697.

This was detected by 76 BGPMon peers.

Expected
Start time: 2017-07-13 19:59:28 UTC
Expected prefix: 188.253.126.0/24
Expected ASN: 3852 (Sohanet)
Event Details
Detected advertisement: 188.253.126.0/24
Detected Origin ASN 12697 (Tose Masiryabi Shabake Aria PJSC)
Detected AS Path 49362 16637 24940 31732 12697
Detected by number of BGPMon peers: 76

Watch the replay of this event