Extra alert information for the "New IRR route record" alert
This alert type is generated when a new route or route6 entry in any IRR database is created for a prefix that is inside your prefix hijack monitoring list.
The idea of this alert is to give you a head start on when someone may be creating malicious route or route6 database entries to enable the hijacking of your network resources.
This alert does not necessarily mean that something bad is happening, but if you are unaware of why the new database entry has been generated then you should likely investigate to ensure that there is nothing suspicious about the new entry.