On Wed, Oct 29, 2014 at 10:39 AM, Aftab Siddiqui <aftab.siddiqui at gmail.com> wrote: > AS13184 http://www.cidr-report.org/cgi-bin/as-report?as=AS13184&view=2.0 shows they deaggregated all of their aggregates and leaked that space to the world (mostly as /23 or /24 subnets of their larger prefixes) the ripestat link shows 2x 12.5k+ bounces in their prefix numbers.