Skip to main content
WorldIP.io

Pulse — Sudden withdrawal event

ASNs whose active prefix count dropped by ≥50% in the last hour vs. the 1–7h baseline — outages, DDoS-blackhole, route leak fallout.

⇲ Atom All feeds ←
Events last 24h
131
Most recent
Showing
131
Refresh
● every 60s

What is Sudden withdrawal event?

A withdrawal event is when an origin AS stops announcing prefixes it was routing. We flag ASNs whose active-prefix count dropped by 50% or more in the last hour versus the 1–7h baseline, because large sudden withdrawals can indicate an outage, a fibre cut, a de-peering, or route-leak fallout.

Geographic distribution

Flagged events

Most recent first · last 24h
Most recent Sudden withdrawal event events detected across RIPE RIS collectors in the last 24 hours
When Severity Prefix AS
Oct 17, 11:29 UTC 80 * AS37711
Oct 17, 11:29 UTC 80 * AS31960
Oct 17, 11:29 UTC 70 * AS262824
Oct 17, 11:29 UTC 70 * AS28227
Oct 17, 11:29 UTC 80 * AS7821
Oct 17, 11:29 UTC 70 * AS135705
Oct 17, 11:14 UTC 80 * AS215721
Oct 17, 10:59 UTC 80 * AS198589
Oct 17, 10:59 UTC 70 * AS12654
Oct 17, 10:59 UTC 80 * AS57588
Oct 17, 10:59 UTC 70 * AS209596
Oct 17, 10:59 UTC 70 * AS202412
Oct 17, 10:59 UTC 80 * AS51020
Oct 17, 10:44 UTC 70 * AS133255
Oct 17, 10:14 UTC 70 * AS53134
Oct 17, 09:59 UTC 80 * AS56476
Oct 17, 09:59 UTC 80 * AS6648
Oct 17, 09:59 UTC 80 * AS12975
Oct 17, 09:29 UTC 80 * AS40376
Oct 17, 08:59 UTC 80 * AS138462
Oct 17, 08:59 UTC 80 * AS262154
Oct 17, 08:44 UTC 80 * AS272483
Oct 17, 08:44 UTC 80 * AS206067
Oct 17, 08:29 UTC 70 * AS21491
Oct 17, 08:14 UTC 80 * AS10353
Oct 17, 08:14 UTC 80 * AS46392
Oct 17, 07:29 UTC 70 * AS28209
Oct 17, 07:14 UTC 80 * AS264862
Oct 17, 07:14 UTC 70 * AS134026
Oct 17, 07:14 UTC 70 * AS135212
Oct 17, 06:59 UTC 80 * AS29084
Oct 17, 06:59 UTC 80 * AS198471
Oct 17, 06:59 UTC 70 * AS28435
Oct 17, 06:59 UTC 70 * AS32726
Oct 17, 06:14 UTC 80 * AS265946
Oct 17, 06:14 UTC 70 * AS11757
Oct 17, 06:14 UTC 70 * AS133594
Oct 17, 05:44 UTC 80 * AS135353
Oct 17, 04:59 UTC 80 * AS269102
Oct 17, 04:59 UTC 70 * AS133731
Oct 17, 04:59 UTC 80 * AS55933
Oct 17, 04:59 UTC 70 * AS24544
Oct 17, 04:59 UTC 70 * AS18180
Oct 17, 03:59 UTC 80 * AS6620
Oct 17, 03:44 UTC 80 * AS141257
Oct 17, 03:44 UTC 70 * AS201877
Oct 17, 03:29 UTC 70 * AS264997
Oct 17, 03:14 UTC 70 * AS11985
Oct 17, 03:14 UTC 70 * AS62442
Oct 17, 03:14 UTC 70 * AS61851
Oct 17, 02:59 UTC 70 * AS63010
Oct 17, 02:44 UTC 80 * AS268391
Oct 17, 02:29 UTC 80 * AS9294
Oct 17, 02:14 UTC 70 * AS264972
Oct 17, 01:59 UTC 80 * AS266963
Oct 17, 01:59 UTC 70 * AS27893
Oct 17, 01:29 UTC 80 * AS3905
Oct 17, 01:14 UTC 80 * AS136716
Oct 17, 01:14 UTC 70 * AS37451
Oct 17, 00:59 UTC 70 * AS263015
Oct 17, 00:59 UTC 70 * AS198721
Oct 17, 00:59 UTC 80 * AS37215
Oct 17, 00:44 UTC 80 * AS54417
Oct 17, 00:44 UTC 80 * AS137951
Oct 17, 00:29 UTC 80 * AS274117
Oct 17, 00:14 UTC 70 * AS327829
Oct 16, 23:44 UTC 70 * AS269538
Oct 16, 23:44 UTC 80 * AS1651
Oct 16, 23:44 UTC 70 * AS262480
Oct 16, 23:29 UTC 80 * AS27759
Oct 16, 23:14 UTC 80 * AS398340
Oct 16, 22:59 UTC 70 * AS212259
Oct 16, 22:59 UTC 80 * AS267268
Oct 16, 22:44 UTC 70 * AS4759
Oct 16, 22:29 UTC 70 * AS59147
Oct 16, 22:29 UTC 70 * AS52898
Oct 16, 22:14 UTC 70 * AS36969
Oct 16, 21:44 UTC 80 * AS18245
Oct 16, 21:44 UTC 70 * AS37545
Oct 16, 21:44 UTC 70 * AS834
Oct 16, 21:29 UTC 70 * AS31972
Oct 16, 20:59 UTC 70 * AS394475
Oct 16, 20:59 UTC 80 * AS402069
Oct 16, 20:59 UTC 70 * AS262437
Oct 16, 20:44 UTC 70 * AS199324
Oct 16, 20:29 UTC 70 * AS59169
Oct 16, 19:44 UTC 70 * AS52913
Oct 16, 19:29 UTC 80 * AS35807
Oct 16, 19:14 UTC 70 * AS52875
Oct 16, 18:59 UTC 70 * AS37531
Oct 16, 18:59 UTC 80 * AS37506
Oct 16, 18:59 UTC 80 * AS262898
Oct 16, 18:59 UTC 80 * AS267560
Oct 16, 18:44 UTC 80 * AS266436
Oct 16, 18:29 UTC 80 * AS16039
Oct 16, 18:29 UTC 70 * AS33490
Oct 16, 18:29 UTC 80 * AS23842
Oct 16, 18:29 UTC 70 * AS44692
Oct 16, 18:14 UTC 80 * AS137346
Oct 16, 17:59 UTC 70 * AS147034
Oct 16, 17:59 UTC 80 * AS268544
Oct 16, 17:59 UTC 80 * AS152689
Oct 16, 17:59 UTC 80 * AS149978
Oct 16, 17:59 UTC 80 * AS141738
Oct 16, 17:59 UTC 80 * AS153383
Oct 16, 17:44 UTC 70 * AS47065
Oct 16, 16:44 UTC 70 * AS17764
Oct 16, 16:29 UTC 70 * AS43142
Oct 16, 16:14 UTC 70 * AS201446
Oct 16, 15:59 UTC 80 * AS8711
Oct 16, 15:14 UTC 70 * AS25429
Oct 16, 14:59 UTC 70 * AS328866
Oct 16, 14:59 UTC 70 * AS263573
Oct 16, 14:44 UTC 80 * AS206867
Oct 16, 14:14 UTC 80 * AS134905
Oct 16, 13:59 UTC 80 * AS59165
Oct 16, 13:59 UTC 70 * AS48887
Oct 16, 13:59 UTC 70 * AS138771
Oct 16, 13:59 UTC 70 * AS328490
Oct 16, 13:44 UTC 70 * AS24175
Oct 16, 13:14 UTC 70 * AS262820
Oct 16, 12:59 UTC 80 * AS13053
Oct 16, 12:59 UTC 70 * AS53051
Oct 16, 12:59 UTC 80 * AS262773
Oct 16, 12:59 UTC 70 * AS267013
Oct 16, 12:44 UTC 80 * AS274181
Oct 16, 12:29 UTC 70 * AS268581
Oct 16, 12:29 UTC 70 * AS262839
Oct 16, 12:14 UTC 80 * AS21947
Oct 16, 11:44 UTC 70 * AS25306
Oct 16, 11:44 UTC 70 * AS209693

Frequently Asked Questions

What is a BGP Sudden withdrawal event?

A withdrawal event is when an origin AS stops announcing prefixes it was routing. We flag ASNs whose active-prefix count dropped by 50% or more in the last hour versus the 1–7h baseline, because large sudden withdrawals can indicate an outage, a fibre cut, a de-peering, or route-leak fallout.

Where does this data come from?

Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.

How often is the Sudden withdrawal event feed updated?

The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-10-17 11:30 UTC.

How do I subscribe to Sudden withdrawal event events?

Subscribe to the Atom feed at /pulse/bgp/withdrawal.atom or poll the JSON endpoint at /api/pulse/bgp/withdrawal.

Share