Skip to main content

Pulse — Sudden withdrawal event

ASNs whose active prefix count dropped by ≥50% in the last hour vs. the 1–7h baseline — outages, DDoS-blackhole, route leak fallout.

Events last 24h
271
Most recent
Showing
200
Refresh
● every 60s

What is Sudden withdrawal event?

A withdrawal event is when an origin AS stops announcing prefixes it was routing. We flag ASNs whose active-prefix count dropped by 50% or more in the last hour versus the 1–7h baseline, because large sudden withdrawals can indicate an outage, a fibre cut, a de-peering, or route-leak fallout.

Geographic distribution

Flagged events

Showing 200 most recent of 271 · last 24h
Most recent Sudden withdrawal event events detected across RIPE RIS collectors in the last 24 hours
When Severity Prefix AS
Oct 16, 21:59 UTC 70 * AS59147
Oct 16, 21:59 UTC 80 * AS215721
Oct 16, 21:59 UTC 80 * AS136716
Oct 16, 21:59 UTC 70 * AS52898
Oct 16, 21:59 UTC 70 * AS4759
Oct 16, 21:59 UTC 80 * AS7821
Oct 16, 21:44 UTC 70 * AS37545
Oct 16, 21:44 UTC 70 * AS28227
Oct 16, 21:44 UTC 80 * AS18245
Oct 16, 21:44 UTC 70 * AS834
Oct 16, 21:29 UTC 70 * AS53134
Oct 16, 21:29 UTC 80 * AS137951
Oct 16, 21:29 UTC 80 * AS1651
Oct 16, 21:29 UTC 70 * AS31972
Oct 16, 21:29 UTC 70 * AS209596
Oct 16, 20:59 UTC 80 * AS402069
Oct 16, 20:59 UTC 70 * AS394475
Oct 16, 20:59 UTC 70 * AS262437
Oct 16, 20:44 UTC 70 * AS198721
Oct 16, 20:44 UTC 70 * AS199324
Oct 16, 20:29 UTC 70 * AS59169
Oct 16, 20:14 UTC 80 * AS9294
Oct 16, 19:44 UTC 70 * AS52913
Oct 16, 19:29 UTC 80 * AS35807
Oct 16, 19:14 UTC 70 * AS52875
Oct 16, 18:59 UTC 70 * AS37531
Oct 16, 18:59 UTC 70 * AS12654
Oct 16, 18:59 UTC 80 * AS267560
Oct 16, 18:59 UTC 80 * AS37506
Oct 16, 18:59 UTC 80 * AS262898
Oct 16, 18:44 UTC 80 * AS266436
Oct 16, 18:29 UTC 80 * AS16039
Oct 16, 18:29 UTC 70 * AS44692
Oct 16, 18:29 UTC 70 * AS33490
Oct 16, 18:29 UTC 80 * AS23842
Oct 16, 18:14 UTC 80 * AS137346
Oct 16, 17:59 UTC 80 * AS153383
Oct 16, 17:59 UTC 80 * AS141738
Oct 16, 17:59 UTC 80 * AS268544
Oct 16, 17:59 UTC 80 * AS152689
Oct 16, 17:59 UTC 80 * AS149978
Oct 16, 17:59 UTC 70 * AS147034
Oct 16, 17:44 UTC 70 * AS47065
Oct 16, 16:44 UTC 70 * AS17764
Oct 16, 16:29 UTC 70 * AS43142
Oct 16, 16:14 UTC 70 * AS201446
Oct 16, 15:59 UTC 80 * AS8711
Oct 16, 15:44 UTC 80 * AS27759
Oct 16, 15:14 UTC 70 * AS25429
Oct 16, 14:59 UTC 70 * AS328866
Oct 16, 14:59 UTC 70 * AS263573
Oct 16, 14:44 UTC 80 * AS206867
Oct 16, 14:14 UTC 80 * AS134905
Oct 16, 13:59 UTC 80 * AS59165
Oct 16, 13:59 UTC 70 * AS48887
Oct 16, 13:59 UTC 70 * AS328490
Oct 16, 13:59 UTC 70 * AS138771
Oct 16, 13:44 UTC 70 * AS24175
Oct 16, 13:14 UTC 70 * AS262820
Oct 16, 12:59 UTC 80 * AS13053
Oct 16, 12:59 UTC 70 * AS53051
Oct 16, 12:59 UTC 80 * AS262773
Oct 16, 12:59 UTC 70 * AS54417
Oct 16, 12:59 UTC 70 * AS267013
Oct 16, 12:44 UTC 80 * AS274181
Oct 16, 12:29 UTC 70 * AS262839
Oct 16, 12:29 UTC 70 * AS268581
Oct 16, 12:14 UTC 80 * AS21947
Oct 16, 11:44 UTC 80 * AS31960
Oct 16, 11:44 UTC 70 * AS209693
Oct 16, 11:44 UTC 70 * AS25306
Oct 16, 10:59 UTC 70 * AS38778
Oct 16, 10:59 UTC 80 * AS49729
Oct 16, 10:44 UTC 70 * AS263015
Oct 16, 10:29 UTC 80 * AS133240
Oct 16, 09:44 UTC 70 * AS37154
Oct 16, 09:29 UTC 80 * AS273090
Oct 16, 08:44 UTC 80 * AS402898
Oct 16, 08:29 UTC 80 * AS264657
Oct 16, 08:14 UTC 80 * AS10353
Oct 16, 08:14 UTC 70 * AS265561
Oct 16, 07:59 UTC 70 * AS60713
Oct 16, 07:44 UTC 80 * AS269978
Oct 16, 07:44 UTC 80 * AS265771
Oct 16, 07:44 UTC 70 * AS61772
Oct 16, 07:29 UTC 70 * AS5410
Oct 16, 07:29 UTC 80 * AS271071
Oct 16, 07:29 UTC 70 * AS39863
Oct 16, 07:29 UTC 70 * AS266749
Oct 16, 07:14 UTC 80 * AS271938
Oct 16, 07:14 UTC 70 * AS329153
Oct 16, 07:14 UTC 80 * AS262996
Oct 16, 06:59 UTC 70 * AS264169
Oct 16, 06:44 UTC 70 * AS395506
Oct 16, 06:44 UTC 70 * AS21491
Oct 16, 06:44 UTC 80 * AS49608
Oct 16, 06:29 UTC 80 * AS397836
Oct 16, 06:29 UTC 80 * AS396010
Oct 16, 05:59 UTC 70 * AS4454
Oct 16, 05:59 UTC 70 * AS27893
Oct 16, 05:59 UTC 80 * AS267373
Oct 16, 05:59 UTC 80 * AS52772
Oct 16, 05:14 UTC 70 * AS38773
Oct 16, 04:59 UTC 80 * AS263907
Oct 16, 04:59 UTC 70 * AS263509
Oct 16, 04:59 UTC 70 * AS28640
Oct 16, 04:59 UTC 70 * AS28195
Oct 16, 04:59 UTC 80 * AS52638
Oct 16, 04:59 UTC 70 * AS262770
Oct 16, 04:59 UTC 80 * AS268205
Oct 16, 04:59 UTC 70 * AS263432
Oct 16, 04:59 UTC 80 * AS268222
Oct 16, 04:59 UTC 70 * AS53080
Oct 16, 04:59 UTC 70 * AS52982
Oct 16, 04:59 UTC 70 * AS262986
Oct 16, 04:59 UTC 70 * AS52940
Oct 16, 04:59 UTC 70 * AS263265
Oct 16, 04:59 UTC 70 * AS52686
Oct 16, 04:59 UTC 70 * AS53047
Oct 16, 04:59 UTC 70 * AS262757
Oct 16, 04:59 UTC 70 * AS262758
Oct 16, 04:59 UTC 70 * AS263520
Oct 16, 04:59 UTC 70 * AS61844
Oct 16, 04:59 UTC 80 * AS266166
Oct 16, 04:59 UTC 70 * AS22356
Oct 16, 04:59 UTC 70 * AS28239
Oct 16, 04:59 UTC 70 * AS262346
Oct 16, 04:59 UTC 70 * AS266211
Oct 16, 04:59 UTC 70 * AS262708
Oct 16, 04:59 UTC 70 * AS262478
Oct 16, 04:59 UTC 70 * AS272539
Oct 16, 04:59 UTC 70 * AS262565
Oct 16, 04:59 UTC 70 * AS61696
Oct 16, 04:59 UTC 80 * AS268782
Oct 16, 04:59 UTC 70 * AS53196
Oct 16, 04:59 UTC 80 * AS264217
Oct 16, 04:59 UTC 70 * AS263322
Oct 16, 04:59 UTC 70 * AS23105
Oct 16, 04:59 UTC 70 * AS263537
Oct 16, 04:59 UTC 80 * AS264223
Oct 16, 04:59 UTC 70 * AS262285
Oct 16, 04:59 UTC 80 * AS264929
Oct 16, 04:59 UTC 80 * AS26592
Oct 16, 04:59 UTC 70 * AS263266
Oct 16, 04:59 UTC 70 * AS262706
Oct 16, 04:59 UTC 80 * AS53171
Oct 16, 04:59 UTC 70 * AS53087
Oct 16, 04:59 UTC 70 * AS266207
Oct 16, 04:59 UTC 80 * AS270689
Oct 16, 04:59 UTC 80 * AS14237
Oct 16, 04:59 UTC 80 * AS28580
Oct 16, 04:59 UTC 70 * AS263028
Oct 16, 04:59 UTC 70 * AS28263
Oct 16, 04:59 UTC 80 * AS266165
Oct 16, 04:59 UTC 70 * AS52575
Oct 16, 04:59 UTC 80 * AS53086
Oct 16, 04:59 UTC 70 * AS52714
Oct 16, 04:59 UTC 70 * AS53050
Oct 16, 04:59 UTC 70 * AS28287
Oct 16, 04:59 UTC 80 * AS266399
Oct 16, 04:59 UTC 90 * AS28667
Oct 16, 04:59 UTC 80 * AS262504
Oct 16, 04:59 UTC 70 * AS268829
Oct 16, 04:59 UTC 70 * AS262417
Oct 16, 04:59 UTC 70 * AS28166
Oct 16, 04:59 UTC 80 * AS28649
Oct 16, 04:59 UTC 80 * AS268273
Oct 16, 04:59 UTC 70 * AS271023
Oct 16, 04:59 UTC 80 * AS271488
Oct 16, 04:59 UTC 70 * AS263083
Oct 16, 04:59 UTC 70 * AS262591
Oct 16, 04:59 UTC 80 * AS265106
Oct 16, 04:59 UTC 70 * AS28666
Oct 16, 04:59 UTC 80 * AS262505
Oct 16, 04:59 UTC 80 * AS265923
Oct 16, 04:59 UTC 70 * AS264428
Oct 16, 04:59 UTC 80 * AS268233
Oct 16, 04:59 UTC 70 * AS53231
Oct 16, 04:59 UTC 70 * AS265937
Oct 16, 04:59 UTC 70 * AS52870
Oct 16, 04:59 UTC 70 * AS263442
Oct 16, 04:59 UTC 70 * AS262998
Oct 16, 04:59 UTC 80 * AS52856
Oct 16, 04:59 UTC 70 * AS264023
Oct 16, 04:59 UTC 70 * AS52758
Oct 16, 04:59 UTC 70 * AS262675
Oct 16, 04:59 UTC 70 * AS262444
Oct 16, 04:59 UTC 70 * AS262722
Oct 16, 04:59 UTC 80 * AS268106
Oct 16, 04:59 UTC 70 * AS265175
Oct 16, 04:59 UTC 70 * AS28334
Oct 16, 04:59 UTC 70 * AS61851
Oct 16, 04:59 UTC 70 * AS262272
Oct 16, 04:59 UTC 70 * AS53178
Oct 16, 04:59 UTC 70 * AS263495
Oct 16, 04:59 UTC 70 * AS263336
Oct 16, 04:59 UTC 90 * AS28669
Oct 16, 04:59 UTC 80 * AS53119
Oct 16, 04:59 UTC 70 * AS262470
Oct 16, 04:59 UTC 70 * AS265933

Frequently Asked Questions

What is a BGP Sudden withdrawal event?

A withdrawal event is when an origin AS stops announcing prefixes it was routing. We flag ASNs whose active-prefix count dropped by 50% or more in the last hour versus the 1–7h baseline, because large sudden withdrawals can indicate an outage, a fibre cut, a de-peering, or route-leak fallout.

Where does this data come from?

Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.

How often is the Sudden withdrawal event feed updated?

The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-10-16 22:05 UTC.

How do I subscribe to Sudden withdrawal event events?

Subscribe to the Atom feed at /pulse/bgp/withdrawal.atom or poll the JSON endpoint at /api/pulse/bgp/withdrawal.

Share