It was AS12389 who leaked for few minutes.

From my view, AS7922, 16059, 4134, 6805, 13649, 29562, 31334, 9116 were all affected.

For example 50.18.174.0/18 from AWS AS16509, right before: [image: Inline image 1] Duration: [image: Inline image 2] After: [image: Inline image 3] --Wilson On Tue, Jul 25, 2017 at 3:44 PM, Wilson Chu <wilson.chu@zoom.us> wrote:

For about two minutes from Tue Jul 25 21:09:42 2017 GMT to 21:11:30 2017, routes to AWS were routed to stream-internet.net and got blackholed.

for example, route to 50.18.x.x at the time:

<snip> 5. sd-cr01-te3-4.161.nyc.stream 0.0% 3 350.9 249.9 173.9 350.9 91.2 6. anc-cr03-xe-5-0-1.149.ff.str 33.3% 3 174.7 195.8 174.7 216.8 29.8 7. radio-cr01-ae4.135.hel.strea 33.3% 3 213.4 213.6 213.4 213.7 0.2 8. mmon-cr01-be3.78.spb.stream- 66.7% 3 204.6 204.6 204.6 204.6 0.0 9. a433-cr01-be1.78.msk.stream- 33.3% 3 214.4 212.9 211.5 214.4 2.1 10. m9-cr05-ae9.77.msk.stream-in 66.7% 3 213.6 213.6 213.6 213.6 0.0 11. m9-cr03-ae1.199.msk.stream-i 33.3% 3 197.5 206.4 197.5 215.3 12.6 12. s-bb3-link.telia.net 66.7% 3 206.8 206.8 206.8 206.8 0.0 13. kbn-bb3-link.telia.net 66.7% 3 214.9 214.9 214.9 214.9 0.0 14. 54.240.242.130 66.7% 3 614.2 614.2 614.2 614.2 0.0 15. 54.240.242.147 66.7% 3 204.4 204.4 204.4 204.4 0.0 16. m9-cr05-ae3.77.msk.stream-in 66.7% 3 262.0 262.0 262.0 262.0 0.0 17. 54.240.242.132 66.7% 3 606.2 606.2 606.2 606.2 0.0 18. 54.240.242.147 33.3% 3 205.5 203.6 201.6 205.5 2.7 19. 205.251.229.158 66.7% 3 200.8 200.8 200.8 200.8 0.0 20. ??? 100.0 3 0.0 0.0 0.0 0.0 0.0 21. ??? 100.0 2 0.0 0.0 0.0 0.0 0.0 22. ??? 100.0 2 0.0 0.0 0.0 0.0 0.0 23. ??? 100.0 2 0.0 0.0 0.0 0.0 0.0

Anyone saw the same issue?

Thanks,

--Wilson