Skip to main content

Pulse — Sudden withdrawal event

ASNs whose active prefix count dropped by ≥50% in the last hour vs. the 1–7h baseline — outages, DDoS-blackhole, route leak fallout.

Events last 24h
3,203
Most recent
Showing
200
Refresh
every 60s

What is Sudden withdrawal event?

A withdrawal event is when an origin AS stops announcing prefixes it was routing. We flag ASNs whose active-prefix count dropped by 50% or more in the last hour versus the 1–7h baseline, because large sudden withdrawals can indicate an outage, a fibre cut, a de-peering, or route-leak fallout.

Geographic distribution

Flagged events

Showing 200 most recent of 3,203 · last 24h
Most recent Sudden withdrawal event events detected across RIPE RIS collectors in the last 24 hours
When Severity Prefix AS
Aug 30, 15:39 UTC 70 * AS8257
Aug 30, 15:39 UTC 70 * AS61828
Aug 30, 15:39 UTC 80 * AS264235
Aug 30, 15:39 UTC 80 * AS7821
Aug 30, 15:39 UTC 80 * AS215721
Aug 30, 15:39 UTC 80 * AS264921
Aug 30, 15:39 UTC 80 * AS63168
Aug 30, 15:39 UTC 80 * AS262290
Aug 30, 15:39 UTC 80 * AS24570
Aug 30, 15:39 UTC 70 * AS210258
Aug 30, 15:39 UTC 70 * AS27482
Aug 30, 15:39 UTC 70 * AS268829
Aug 30, 15:39 UTC 70 * AS268311
Aug 30, 15:39 UTC 70 * AS40026
Aug 30, 15:39 UTC 80 * AS269329
Aug 30, 15:39 UTC 70 * AS263888
Aug 30, 15:39 UTC 80 * AS265394
Aug 30, 15:39 UTC 70 * AS44521
Aug 30, 15:39 UTC 80 * AS4249
Aug 30, 15:39 UTC 70 * AS262428
Aug 30, 15:39 UTC 80 * AS265267
Aug 30, 15:39 UTC 80 * AS147019
Aug 30, 15:39 UTC 70 * AS61373
Aug 30, 15:39 UTC 70 * AS45644
Aug 30, 15:39 UTC 70 * AS4818
Aug 30, 15:39 UTC 80 * AS264867
Aug 30, 15:39 UTC 80 * AS269705
Aug 30, 15:39 UTC 70 * AS41362
Aug 30, 15:39 UTC 80 * AS268280
Aug 30, 15:39 UTC 80 * AS211249
Aug 30, 15:39 UTC 70 * AS133772
Aug 30, 15:39 UTC 70 * AS265303
Aug 30, 15:39 UTC 80 * AS264342
Aug 30, 15:39 UTC 70 * AS61754
Aug 30, 15:39 UTC 80 * AS262669
Aug 30, 15:39 UTC 70 * AS25273
Aug 30, 15:39 UTC 80 * AS131232
Aug 30, 15:39 UTC 80 * AS134729
Aug 30, 15:39 UTC 80 * AS61704
Aug 30, 15:39 UTC 70 * AS262879
Aug 30, 15:39 UTC 70 * AS58789
Aug 30, 15:39 UTC 70 * AS18018
Aug 30, 15:39 UTC 80 * AS265142
Aug 30, 15:39 UTC 70 * AS8518
Aug 30, 15:39 UTC 80 * AS264592
Aug 30, 15:39 UTC 80 * AS52977
Aug 30, 15:39 UTC 90 * AS28201
Aug 30, 15:39 UTC 70 * AS267575
Aug 30, 15:39 UTC 70 * AS28178
Aug 30, 15:39 UTC 80 * AS265027
Aug 30, 15:39 UTC 70 * AS263035
Aug 30, 15:39 UTC 70 * AS52947
Aug 30, 15:39 UTC 80 * AS61684
Aug 30, 15:39 UTC 80 * AS262445
Aug 30, 15:39 UTC 70 * AS48326
Aug 30, 15:39 UTC 70 * AS270965
Aug 30, 15:39 UTC 80 * AS53050
Aug 30, 15:39 UTC 70 * AS327926
Aug 30, 15:39 UTC 80 * AS138559
Aug 30, 15:39 UTC 70 * AS43338
Aug 30, 15:39 UTC 80 * AS202161
Aug 30, 15:39 UTC 80 * AS41741
Aug 30, 15:39 UTC 70 * AS267174
Aug 30, 15:39 UTC 70 * AS60503
Aug 30, 15:39 UTC 70 * AS262463
Aug 30, 15:39 UTC 70 * AS28634
Aug 30, 15:39 UTC 80 * AS18801
Aug 30, 15:39 UTC 80 * AS52962
Aug 30, 15:39 UTC 70 * AS53094
Aug 30, 15:39 UTC 70 * AS266081
Aug 30, 15:39 UTC 80 * AS263574
Aug 30, 15:39 UTC 80 * AS270884
Aug 30, 15:39 UTC 80 * AS266591
Aug 30, 15:39 UTC 70 * AS52861
Aug 30, 15:39 UTC 80 * AS269114
Aug 30, 15:39 UTC 80 * AS267348
Aug 30, 15:39 UTC 70 * AS53175
Aug 30, 15:39 UTC 80 * AS262412
Aug 30, 15:39 UTC 80 * AS28202
Aug 30, 15:39 UTC 80 * AS16378
Aug 30, 15:39 UTC 80 * AS269018
Aug 30, 15:39 UTC 80 * AS263263
Aug 30, 15:39 UTC 80 * AS267117
Aug 30, 15:39 UTC 80 * AS39370
Aug 30, 15:39 UTC 70 * AS13786
Aug 30, 15:39 UTC 70 * AS31747
Aug 30, 15:39 UTC 70 * AS19723
Aug 30, 15:39 UTC 70 * AS264344
Aug 30, 15:39 UTC 80 * AS14920
Aug 30, 15:39 UTC 70 * AS28668
Aug 30, 15:39 UTC 70 * AS265279
Aug 30, 15:39 UTC 70 * AS266427
Aug 30, 15:39 UTC 70 * AS264524
Aug 30, 15:39 UTC 70 * AS201603
Aug 30, 15:39 UTC 70 * AS31490
Aug 30, 15:39 UTC 80 * AS268818
Aug 30, 15:39 UTC 70 * AS263608
Aug 30, 15:39 UTC 80 * AS266831
Aug 30, 15:39 UTC 70 * AS28327
Aug 30, 15:39 UTC 80 * AS267656
Aug 30, 15:39 UTC 80 * AS52528
Aug 30, 15:39 UTC 80 * AS264332
Aug 30, 15:24 UTC 70 * AS11228
Aug 30, 15:24 UTC 80 * AS55045
Aug 30, 15:24 UTC 70 * AS40861
Aug 30, 15:24 UTC 70 * AS30016
Aug 30, 15:24 UTC 80 * AS32524
Aug 30, 15:24 UTC 70 * AS9751
Aug 30, 15:24 UTC 80 * AS213382
Aug 30, 15:24 UTC 80 * AS36504
Aug 30, 15:24 UTC 70 * AS11676
Aug 30, 15:24 UTC 70 * AS138152
Aug 30, 15:24 UTC 70 * AS327700
Aug 30, 15:24 UTC 70 * AS399646
Aug 30, 15:09 UTC 70 * AS264114
Aug 30, 15:09 UTC 80 * AS270269
Aug 30, 15:09 UTC 70 * AS262301
Aug 30, 15:09 UTC 80 * AS262628
Aug 30, 15:09 UTC 80 * AS263155
Aug 30, 15:09 UTC 80 * AS266331
Aug 30, 15:09 UTC 70 * AS264426
Aug 30, 15:09 UTC 80 * AS16891
Aug 30, 15:09 UTC 80 * AS270723
Aug 30, 15:09 UTC 80 * AS51955
Aug 30, 15:09 UTC 70 * AS26881
Aug 30, 15:09 UTC 80 * AS265232
Aug 30, 15:09 UTC 70 * AS263579
Aug 30, 15:09 UTC 80 * AS61745
Aug 30, 15:09 UTC 80 * AS271630
Aug 30, 15:09 UTC 80 * AS270262
Aug 30, 15:09 UTC 70 * AS262565
Aug 30, 15:09 UTC 80 * AS264294
Aug 30, 15:09 UTC 80 * AS271041
Aug 30, 15:09 UTC 80 * AS262460
Aug 30, 15:09 UTC 80 * AS271640
Aug 30, 15:09 UTC 80 * AS270763
Aug 30, 15:09 UTC 70 * AS28243
Aug 30, 15:09 UTC 70 * AS263559
Aug 30, 15:09 UTC 80 * AS262947
Aug 30, 15:09 UTC 80 * AS268748
Aug 30, 15:09 UTC 70 * AS53013
Aug 30, 15:09 UTC 80 * AS52746
Aug 30, 15:09 UTC 70 * AS28278
Aug 30, 15:09 UTC 80 * AS267638
Aug 30, 15:09 UTC 70 * AS61636
Aug 30, 15:09 UTC 70 * AS263103
Aug 30, 15:09 UTC 70 * AS52473
Aug 30, 15:09 UTC 80 * AS266572
Aug 30, 15:09 UTC 80 * AS263485
Aug 30, 15:09 UTC 70 * AS262352
Aug 30, 15:09 UTC 70 * AS28227
Aug 30, 15:09 UTC 70 * AS262851
Aug 30, 15:09 UTC 80 * AS268556
Aug 30, 15:09 UTC 70 * AS61888
Aug 30, 15:09 UTC 70 * AS28177
Aug 30, 15:09 UTC 80 * AS53139
Aug 30, 15:09 UTC 80 * AS268275
Aug 30, 15:09 UTC 80 * AS269401
Aug 30, 15:09 UTC 70 * AS52967
Aug 30, 15:09 UTC 80 * AS266189
Aug 30, 15:09 UTC 80 * AS262844
Aug 30, 15:09 UTC 80 * AS271626
Aug 30, 15:09 UTC 80 * AS53043
Aug 30, 15:09 UTC 70 * AS52596
Aug 30, 15:09 UTC 70 * AS266915
Aug 30, 15:09 UTC 70 * AS28666
Aug 30, 15:09 UTC 80 * AS64053
Aug 30, 15:09 UTC 70 * AS28189
Aug 30, 15:09 UTC 80 * AS265437
Aug 30, 15:09 UTC 80 * AS271401
Aug 30, 15:09 UTC 80 * AS269500
Aug 30, 15:09 UTC 80 * AS28577
Aug 30, 15:09 UTC 80 * AS53108
Aug 30, 15:09 UTC 80 * AS273991
Aug 30, 15:09 UTC 70 * AS270724
Aug 30, 15:09 UTC 80 * AS263042
Aug 30, 15:09 UTC 80 * AS273782
Aug 30, 15:09 UTC 70 * AS263479
Aug 30, 15:09 UTC 80 * AS268186
Aug 30, 15:09 UTC 80 * AS265042
Aug 30, 15:09 UTC 70 * AS262842
Aug 30, 15:09 UTC 80 * AS267472
Aug 30, 15:09 UTC 80 * AS262496
Aug 30, 15:09 UTC 80 * AS52251
Aug 30, 15:09 UTC 80 * AS264173
Aug 30, 15:09 UTC 80 * AS271664
Aug 30, 15:09 UTC 70 * AS42707
Aug 30, 15:09 UTC 80 * AS264166
Aug 30, 15:09 UTC 80 * AS207266
Aug 30, 15:09 UTC 80 * AS52965
Aug 30, 15:09 UTC 80 * AS273371
Aug 30, 15:09 UTC 80 * AS263031
Aug 30, 15:09 UTC 70 * AS61713
Aug 30, 15:09 UTC 70 * AS28576
Aug 30, 15:09 UTC 80 * AS52564
Aug 30, 15:09 UTC 80 * AS52565
Aug 30, 15:09 UTC 70 * AS23106
Aug 30, 15:09 UTC 80 * AS28333
Aug 30, 15:09 UTC 80 * AS263137
Aug 30, 15:09 UTC 80 * AS267077

Frequently Asked Questions

What is a BGP Sudden withdrawal event?

A withdrawal event is when an origin AS stops announcing prefixes it was routing. We flag ASNs whose active-prefix count dropped by 50% or more in the last hour versus the 1–7h baseline, because large sudden withdrawals can indicate an outage, a fibre cut, a de-peering, or route-leak fallout.

Where does this data come from?

Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.

How often is the Sudden withdrawal event feed updated?

The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-08-30 15:50 UTC.

How do I subscribe to Sudden withdrawal event events?

Subscribe to the Atom feed at /pulse/bgp/withdrawal.atom or poll the JSON endpoint at /api/pulse/bgp/withdrawal.

Share