Let us put it this way. There might be several simultaneous leaks of this same private asn because multiple country netblocks are being announced. Or this is actually malicious. I have no way to tell without checking what abuse is coming from there. I'm sure RFG is researching that part of it, and won't ask him about it till he's ready to disclose. On 15/04/19, 10:02 AM, "anti-abuse-wg on behalf of ac" <anti-abuse-wg-bounces@ripe.net on behalf of ac@main.me> wrote: On Mon, 15 Apr 2019 09:40:35 +0530 Suresh Ramasubramanian <ops.lists@gmail.com> wrote: > On 15/04/19, 9:26 AM, "anti-abuse-wg on behalf of ac" > <anti-abuse-wg-bounces@ripe.net on behalf of ac@main.me> wrote: > > Sorry for top posting, but I fail to see how any of this is > > abuse related? > > Given that it is RFG raising this, I think it is a pretty safe bet > that this ASN is associated with some abusive activity that he has > seen. > Okay, but this is not yet clear? pvt asn is leaked often (and sometimes voluminous) - so is common/frequent and in itself means nothing, if this is that, - but as this affects that network, there is no abuse? or I am missing something?