Skip to main content

Pulse — Sudden withdrawal event

ASNs whose active prefix count dropped by ≥50% in the last hour vs. the 1–7h baseline — outages, DDoS-blackhole, route leak fallout.

Events last 24h
355
Most recent
Showing
200
Refresh
● every 60s

What is Sudden withdrawal event?

A withdrawal event is when an origin AS stops announcing prefixes it was routing. We flag ASNs whose active-prefix count dropped by 50% or more in the last hour versus the 1–7h baseline, because large sudden withdrawals can indicate an outage, a fibre cut, a de-peering, or route-leak fallout.

Geographic distribution

Flagged events

Showing 200 most recent of 355 · last 24h
Most recent Sudden withdrawal event events detected across RIPE RIS collectors in the last 24 hours
When Severity Prefix AS
Oct 14, 07:44 UTC 80 * AS9294
Oct 14, 07:44 UTC 80 * AS136969
Oct 14, 07:44 UTC 70 * AS22709
Oct 14, 07:44 UTC 70 * AS133594
Oct 14, 07:44 UTC 70 * AS20912
Oct 14, 07:44 UTC 80 * AS215721
Oct 14, 07:44 UTC 80 * AS10429
Oct 14, 07:44 UTC 80 * AS133593
Oct 14, 07:44 UTC 80 * AS7821
Oct 14, 07:44 UTC 70 * AS28227
Oct 14, 07:29 UTC 70 * AS329181
Oct 14, 07:29 UTC 70 * AS198721
Oct 14, 07:29 UTC 80 * AS136642
Oct 14, 07:29 UTC 70 * AS138797
Oct 14, 06:59 UTC 70 * AS12654
Oct 14, 06:59 UTC 80 * AS266231
Oct 14, 06:59 UTC 70 * AS264067
Oct 14, 06:59 UTC 80 * AS41984
Oct 14, 06:59 UTC 70 * AS7577
Oct 14, 06:44 UTC 80 * AS137951
Oct 14, 06:44 UTC 80 * AS274401
Oct 14, 06:44 UTC 70 * AS28137
Oct 14, 06:44 UTC 70 * AS33734
Oct 14, 06:29 UTC 70 * AS31619
Oct 14, 06:29 UTC 80 * AS40837
Oct 14, 06:29 UTC 70 * AS271907
Oct 14, 06:29 UTC 80 * AS33778
Oct 14, 06:29 UTC 70 * AS32160
Oct 14, 06:29 UTC 70 * AS61893
Oct 14, 06:14 UTC 70 * AS55140
Oct 14, 06:14 UTC 80 * AS56106
Oct 14, 06:14 UTC 80 * AS266057
Oct 14, 06:14 UTC 80 * AS267676
Oct 14, 06:14 UTC 70 * AS399898
Oct 14, 05:59 UTC 80 * AS58330
Oct 14, 05:44 UTC 80 * AS13053
Oct 14, 05:44 UTC 70 * AS262588
Oct 14, 05:29 UTC 70 * AS52253
Oct 14, 05:29 UTC 70 * AS16628
Oct 14, 05:29 UTC 80 * AS215228
Oct 14, 04:59 UTC 70 * AS207234
Oct 14, 04:59 UTC 70 * AS199284
Oct 14, 04:59 UTC 80 * AS328446
Oct 14, 04:59 UTC 80 * AS264147
Oct 14, 04:59 UTC 80 * AS5386
Oct 14, 04:44 UTC 70 * AS398191
Oct 14, 04:44 UTC 80 * AS30113
Oct 14, 04:44 UTC 80 * AS30938
Oct 14, 04:44 UTC 70 * AS262886
Oct 14, 04:44 UTC 70 * AS53238
Oct 14, 04:44 UTC 70 * AS53134
Oct 14, 04:29 UTC 80 * AS36998
Oct 14, 04:29 UTC 70 * AS264552
Oct 14, 04:29 UTC 70 * AS262504
Oct 14, 04:29 UTC 80 * AS264228
Oct 14, 04:14 UTC 70 * AS263924
Oct 14, 04:14 UTC 70 * AS264491
Oct 14, 03:44 UTC 70 * AS33490
Oct 14, 03:44 UTC 70 * AS266160
Oct 14, 03:44 UTC 70 * AS263652
Oct 14, 03:29 UTC 80 * AS27697
Oct 14, 03:29 UTC 80 * AS18111
Oct 14, 03:29 UTC 70 * AS264186
Oct 14, 02:59 UTC 70 * AS51500
Oct 14, 02:59 UTC 70 * AS263053
Oct 14, 02:44 UTC 70 * AS27893
Oct 14, 02:44 UTC 70 * AS328320
Oct 14, 02:29 UTC 80 * AS21928
Oct 14, 02:29 UTC 70 * AS20477
Oct 14, 02:29 UTC 90 * AS34550
Oct 14, 02:14 UTC 80 * AS37506
Oct 14, 02:14 UTC 70 * AS201550
Oct 14, 02:14 UTC 70 * AS262213
Oct 14, 01:59 UTC 80 * AS36912
Oct 14, 01:59 UTC 80 * AS5713
Oct 14, 01:44 UTC 70 * AS262480
Oct 14, 01:44 UTC 80 * AS265136
Oct 14, 01:44 UTC 70 * AS30983
Oct 14, 01:29 UTC 80 * AS203545
Oct 14, 01:29 UTC 80 * AS215238
Oct 14, 01:29 UTC 90 * AS28787
Oct 14, 01:29 UTC 80 * AS212219
Oct 14, 01:29 UTC 80 * AS136100
Oct 14, 01:14 UTC 80 * AS16742
Oct 14, 01:14 UTC 80 * AS41054
Oct 14, 00:44 UTC 80 * AS271414
Oct 14, 00:44 UTC 70 * AS35826
Oct 14, 00:44 UTC 80 * AS48065
Oct 14, 00:29 UTC 90 * AS5277
Oct 14, 00:14 UTC 80 * AS34978
Oct 14, 00:14 UTC 70 * AS62166
Oct 14, 00:14 UTC 70 * AS52898
Oct 14, 00:14 UTC 80 * AS62275
Oct 14, 00:14 UTC 80 * AS210421
Oct 14, 00:14 UTC 70 * AS38851
Oct 13, 23:59 UTC 80 * AS267320
Oct 13, 23:59 UTC 70 * AS267013
Oct 13, 23:59 UTC 70 * AS29515
Oct 13, 23:59 UTC 80 * AS266268
Oct 13, 23:44 UTC 70 * AS61466
Oct 13, 23:29 UTC 70 * AS61939
Oct 13, 23:29 UTC 80 * AS268145
Oct 13, 23:29 UTC 80 * AS268976
Oct 13, 23:29 UTC 70 * AS15549
Oct 13, 23:29 UTC 70 * AS28583
Oct 13, 23:14 UTC 70 * AS25429
Oct 13, 23:14 UTC 70 * AS37545
Oct 13, 23:14 UTC 70 * AS264005
Oct 13, 23:14 UTC 80 * AS42998
Oct 13, 22:59 UTC 80 * AS213269
Oct 13, 22:44 UTC 80 * AS147302
Oct 13, 22:44 UTC 80 * AS41039
Oct 13, 22:44 UTC 70 * AS48887
Oct 13, 22:44 UTC 70 * AS213323
Oct 13, 22:44 UTC 70 * AS211101
Oct 13, 22:29 UTC 80 * AS190
Oct 13, 22:29 UTC 80 * AS267608
Oct 13, 22:29 UTC 70 * AS58487
Oct 13, 22:29 UTC 80 * AS62250
Oct 13, 22:14 UTC 80 * AS198357
Oct 13, 22:14 UTC 80 * AS48431
Oct 13, 22:14 UTC 70 * AS36530
Oct 13, 22:14 UTC 70 * AS60847
Oct 13, 21:59 UTC 70 * AS273244
Oct 13, 21:59 UTC 80 * AS263858
Oct 13, 21:59 UTC 80 * AS57474
Oct 13, 21:59 UTC 80 * AS213852
Oct 13, 21:59 UTC 80 * AS200645
Oct 13, 21:59 UTC 80 * AS48147
Oct 13, 21:59 UTC 80 * AS49972
Oct 13, 21:59 UTC 80 * AS204834
Oct 13, 21:59 UTC 80 * AS57497
Oct 13, 21:59 UTC 70 * AS9147
Oct 13, 21:59 UTC 70 * AS270364
Oct 13, 21:59 UTC 80 * AS29577
Oct 13, 21:59 UTC 70 * AS262770
Oct 13, 21:44 UTC 70 * AS206175
Oct 13, 21:29 UTC 80 * AS262557
Oct 13, 21:14 UTC 80 * AS209153
Oct 13, 21:14 UTC 80 * AS34376
Oct 13, 20:59 UTC 80 * AS26410
Oct 13, 20:44 UTC 70 * AS268151
Oct 13, 20:44 UTC 70 * AS147285
Oct 13, 20:29 UTC 70 * AS38987
Oct 13, 20:29 UTC 70 * AS52749
Oct 13, 20:29 UTC 70 * AS13099
Oct 13, 20:14 UTC 70 * AS135839
Oct 13, 19:59 UTC 70 * AS23105
Oct 13, 19:59 UTC 70 * AS28652
Oct 13, 19:59 UTC 70 * AS52940
Oct 13, 19:59 UTC 80 * AS53086
Oct 13, 19:59 UTC 80 * AS18245
Oct 13, 19:59 UTC 70 * AS263084
Oct 13, 19:59 UTC 70 * AS265041
Oct 13, 19:59 UTC 70 * AS356
Oct 13, 19:59 UTC 70 * AS262278
Oct 13, 19:59 UTC 70 * AS52714
Oct 13, 19:59 UTC 70 * AS263083
Oct 13, 19:59 UTC 70 * AS28239
Oct 13, 19:59 UTC 70 * AS53050
Oct 13, 19:59 UTC 70 * AS263495
Oct 13, 19:59 UTC 70 * AS271023
Oct 13, 19:44 UTC 70 * AS61696
Oct 13, 19:44 UTC 70 * AS61923
Oct 13, 19:44 UTC 80 * AS268273
Oct 13, 19:44 UTC 70 * AS28287
Oct 13, 19:44 UTC 80 * AS266399
Oct 13, 19:44 UTC 80 * AS268222
Oct 13, 19:44 UTC 70 * AS262346
Oct 13, 19:44 UTC 70 * AS262757
Oct 13, 19:44 UTC 70 * AS263520
Oct 13, 19:44 UTC 70 * AS262839
Oct 13, 19:44 UTC 70 * AS263322
Oct 13, 19:44 UTC 70 * AS263028
Oct 13, 19:44 UTC 80 * AS53171
Oct 13, 19:44 UTC 70 * AS262706
Oct 13, 19:44 UTC 70 * AS28195
Oct 13, 19:44 UTC 70 * AS266207
Oct 13, 19:44 UTC 70 * AS52575
Oct 13, 19:44 UTC 70 * AS61844
Oct 13, 19:44 UTC 80 * AS270689
Oct 13, 19:44 UTC 70 * AS265933
Oct 13, 19:44 UTC 70 * AS28263
Oct 13, 19:44 UTC 70 * AS262591
Oct 13, 19:44 UTC 80 * AS266165
Oct 13, 19:44 UTC 80 * AS52638
Oct 13, 19:44 UTC 70 * AS266211
Oct 13, 19:44 UTC 70 * AS262708
Oct 13, 19:44 UTC 80 * AS265106
Oct 13, 19:44 UTC 80 * AS52855
Oct 13, 19:44 UTC 70 * AS28666
Oct 13, 19:44 UTC 70 * AS28166
Oct 13, 19:44 UTC 80 * AS268782
Oct 13, 19:44 UTC 70 * AS268829
Oct 13, 19:44 UTC 70 * AS262986
Oct 13, 19:44 UTC 80 * AS264217
Oct 13, 19:44 UTC 70 * AS262722
Oct 13, 19:44 UTC 80 * AS264929
Oct 13, 19:44 UTC 70 * AS263432
Oct 13, 19:44 UTC 80 * AS263907

Frequently Asked Questions

What is a BGP Sudden withdrawal event?

A withdrawal event is when an origin AS stops announcing prefixes it was routing. We flag ASNs whose active-prefix count dropped by 50% or more in the last hour versus the 1–7h baseline, because large sudden withdrawals can indicate an outage, a fibre cut, a de-peering, or route-leak fallout.

Where does this data come from?

Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.

How often is the Sudden withdrawal event feed updated?

The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-10-14 07:50 UTC.

How do I subscribe to Sudden withdrawal event events?

Subscribe to the Atom feed at /pulse/bgp/withdrawal.atom or poll the JSON endpoint at /api/pulse/bgp/withdrawal.

Share