Pulse — Sudden withdrawal event
ASNs whose active prefix count dropped by ≥50% in the last hour vs. the 1–7h baseline — outages, DDoS-blackhole, route leak fallout.
What is Sudden withdrawal event?
A withdrawal event is when an origin AS stops announcing prefixes it was routing. We flag ASNs whose active-prefix count dropped by 50% or more in the last hour versus the 1–7h baseline, because large sudden withdrawals can indicate an outage, a fibre cut, a de-peering, or route-leak fallout.
Geographic distribution
Flagged events
Showing 200 most recent of 355 · last 24h| When | Severity | Prefix | AS |
|---|---|---|---|
| Oct 14, 07:44 UTC | 80 | * | AS9294 |
| Oct 14, 07:44 UTC | 80 | * | AS136969 |
| Oct 14, 07:44 UTC | 70 | * | AS22709 |
| Oct 14, 07:44 UTC | 70 | * | AS133594 |
| Oct 14, 07:44 UTC | 70 | * | AS20912 |
| Oct 14, 07:44 UTC | 80 | * | AS215721 |
| Oct 14, 07:44 UTC | 80 | * | AS10429 |
| Oct 14, 07:44 UTC | 80 | * | AS133593 |
| Oct 14, 07:44 UTC | 80 | * | AS7821 |
| Oct 14, 07:44 UTC | 70 | * | AS28227 |
| Oct 14, 07:29 UTC | 70 | * | AS329181 |
| Oct 14, 07:29 UTC | 70 | * | AS198721 |
| Oct 14, 07:29 UTC | 80 | * | AS136642 |
| Oct 14, 07:29 UTC | 70 | * | AS138797 |
| Oct 14, 06:59 UTC | 70 | * | AS12654 |
| Oct 14, 06:59 UTC | 80 | * | AS266231 |
| Oct 14, 06:59 UTC | 70 | * | AS264067 |
| Oct 14, 06:59 UTC | 80 | * | AS41984 |
| Oct 14, 06:59 UTC | 70 | * | AS7577 |
| Oct 14, 06:44 UTC | 80 | * | AS137951 |
| Oct 14, 06:44 UTC | 80 | * | AS274401 |
| Oct 14, 06:44 UTC | 70 | * | AS28137 |
| Oct 14, 06:44 UTC | 70 | * | AS33734 |
| Oct 14, 06:29 UTC | 70 | * | AS31619 |
| Oct 14, 06:29 UTC | 80 | * | AS40837 |
| Oct 14, 06:29 UTC | 70 | * | AS271907 |
| Oct 14, 06:29 UTC | 80 | * | AS33778 |
| Oct 14, 06:29 UTC | 70 | * | AS32160 |
| Oct 14, 06:29 UTC | 70 | * | AS61893 |
| Oct 14, 06:14 UTC | 70 | * | AS55140 |
| Oct 14, 06:14 UTC | 80 | * | AS56106 |
| Oct 14, 06:14 UTC | 80 | * | AS266057 |
| Oct 14, 06:14 UTC | 80 | * | AS267676 |
| Oct 14, 06:14 UTC | 70 | * | AS399898 |
| Oct 14, 05:59 UTC | 80 | * | AS58330 |
| Oct 14, 05:44 UTC | 80 | * | AS13053 |
| Oct 14, 05:44 UTC | 70 | * | AS262588 |
| Oct 14, 05:29 UTC | 70 | * | AS52253 |
| Oct 14, 05:29 UTC | 70 | * | AS16628 |
| Oct 14, 05:29 UTC | 80 | * | AS215228 |
| Oct 14, 04:59 UTC | 70 | * | AS207234 |
| Oct 14, 04:59 UTC | 70 | * | AS199284 |
| Oct 14, 04:59 UTC | 80 | * | AS328446 |
| Oct 14, 04:59 UTC | 80 | * | AS264147 |
| Oct 14, 04:59 UTC | 80 | * | AS5386 |
| Oct 14, 04:44 UTC | 70 | * | AS398191 |
| Oct 14, 04:44 UTC | 80 | * | AS30113 |
| Oct 14, 04:44 UTC | 80 | * | AS30938 |
| Oct 14, 04:44 UTC | 70 | * | AS262886 |
| Oct 14, 04:44 UTC | 70 | * | AS53238 |
| Oct 14, 04:44 UTC | 70 | * | AS53134 |
| Oct 14, 04:29 UTC | 80 | * | AS36998 |
| Oct 14, 04:29 UTC | 70 | * | AS264552 |
| Oct 14, 04:29 UTC | 70 | * | AS262504 |
| Oct 14, 04:29 UTC | 80 | * | AS264228 |
| Oct 14, 04:14 UTC | 70 | * | AS263924 |
| Oct 14, 04:14 UTC | 70 | * | AS264491 |
| Oct 14, 03:44 UTC | 70 | * | AS33490 |
| Oct 14, 03:44 UTC | 70 | * | AS266160 |
| Oct 14, 03:44 UTC | 70 | * | AS263652 |
| Oct 14, 03:29 UTC | 80 | * | AS27697 |
| Oct 14, 03:29 UTC | 80 | * | AS18111 |
| Oct 14, 03:29 UTC | 70 | * | AS264186 |
| Oct 14, 02:59 UTC | 70 | * | AS51500 |
| Oct 14, 02:59 UTC | 70 | * | AS263053 |
| Oct 14, 02:44 UTC | 70 | * | AS27893 |
| Oct 14, 02:44 UTC | 70 | * | AS328320 |
| Oct 14, 02:29 UTC | 80 | * | AS21928 |
| Oct 14, 02:29 UTC | 70 | * | AS20477 |
| Oct 14, 02:29 UTC | 90 | * | AS34550 |
| Oct 14, 02:14 UTC | 80 | * | AS37506 |
| Oct 14, 02:14 UTC | 70 | * | AS201550 |
| Oct 14, 02:14 UTC | 70 | * | AS262213 |
| Oct 14, 01:59 UTC | 80 | * | AS36912 |
| Oct 14, 01:59 UTC | 80 | * | AS5713 |
| Oct 14, 01:44 UTC | 70 | * | AS262480 |
| Oct 14, 01:44 UTC | 80 | * | AS265136 |
| Oct 14, 01:44 UTC | 70 | * | AS30983 |
| Oct 14, 01:29 UTC | 80 | * | AS203545 |
| Oct 14, 01:29 UTC | 80 | * | AS215238 |
| Oct 14, 01:29 UTC | 90 | * | AS28787 |
| Oct 14, 01:29 UTC | 80 | * | AS212219 |
| Oct 14, 01:29 UTC | 80 | * | AS136100 |
| Oct 14, 01:14 UTC | 80 | * | AS16742 |
| Oct 14, 01:14 UTC | 80 | * | AS41054 |
| Oct 14, 00:44 UTC | 80 | * | AS271414 |
| Oct 14, 00:44 UTC | 70 | * | AS35826 |
| Oct 14, 00:44 UTC | 80 | * | AS48065 |
| Oct 14, 00:29 UTC | 90 | * | AS5277 |
| Oct 14, 00:14 UTC | 80 | * | AS34978 |
| Oct 14, 00:14 UTC | 70 | * | AS62166 |
| Oct 14, 00:14 UTC | 70 | * | AS52898 |
| Oct 14, 00:14 UTC | 80 | * | AS62275 |
| Oct 14, 00:14 UTC | 80 | * | AS210421 |
| Oct 14, 00:14 UTC | 70 | * | AS38851 |
| Oct 13, 23:59 UTC | 80 | * | AS267320 |
| Oct 13, 23:59 UTC | 70 | * | AS267013 |
| Oct 13, 23:59 UTC | 70 | * | AS29515 |
| Oct 13, 23:59 UTC | 80 | * | AS266268 |
| Oct 13, 23:44 UTC | 70 | * | AS61466 |
| Oct 13, 23:29 UTC | 70 | * | AS61939 |
| Oct 13, 23:29 UTC | 80 | * | AS268145 |
| Oct 13, 23:29 UTC | 80 | * | AS268976 |
| Oct 13, 23:29 UTC | 70 | * | AS15549 |
| Oct 13, 23:29 UTC | 70 | * | AS28583 |
| Oct 13, 23:14 UTC | 70 | * | AS25429 |
| Oct 13, 23:14 UTC | 70 | * | AS37545 |
| Oct 13, 23:14 UTC | 70 | * | AS264005 |
| Oct 13, 23:14 UTC | 80 | * | AS42998 |
| Oct 13, 22:59 UTC | 80 | * | AS213269 |
| Oct 13, 22:44 UTC | 80 | * | AS147302 |
| Oct 13, 22:44 UTC | 80 | * | AS41039 |
| Oct 13, 22:44 UTC | 70 | * | AS48887 |
| Oct 13, 22:44 UTC | 70 | * | AS213323 |
| Oct 13, 22:44 UTC | 70 | * | AS211101 |
| Oct 13, 22:29 UTC | 80 | * | AS190 |
| Oct 13, 22:29 UTC | 80 | * | AS267608 |
| Oct 13, 22:29 UTC | 70 | * | AS58487 |
| Oct 13, 22:29 UTC | 80 | * | AS62250 |
| Oct 13, 22:14 UTC | 80 | * | AS198357 |
| Oct 13, 22:14 UTC | 80 | * | AS48431 |
| Oct 13, 22:14 UTC | 70 | * | AS36530 |
| Oct 13, 22:14 UTC | 70 | * | AS60847 |
| Oct 13, 21:59 UTC | 70 | * | AS273244 |
| Oct 13, 21:59 UTC | 80 | * | AS263858 |
| Oct 13, 21:59 UTC | 80 | * | AS57474 |
| Oct 13, 21:59 UTC | 80 | * | AS213852 |
| Oct 13, 21:59 UTC | 80 | * | AS200645 |
| Oct 13, 21:59 UTC | 80 | * | AS48147 |
| Oct 13, 21:59 UTC | 80 | * | AS49972 |
| Oct 13, 21:59 UTC | 80 | * | AS204834 |
| Oct 13, 21:59 UTC | 80 | * | AS57497 |
| Oct 13, 21:59 UTC | 70 | * | AS9147 |
| Oct 13, 21:59 UTC | 70 | * | AS270364 |
| Oct 13, 21:59 UTC | 80 | * | AS29577 |
| Oct 13, 21:59 UTC | 70 | * | AS262770 |
| Oct 13, 21:44 UTC | 70 | * | AS206175 |
| Oct 13, 21:29 UTC | 80 | * | AS262557 |
| Oct 13, 21:14 UTC | 80 | * | AS209153 |
| Oct 13, 21:14 UTC | 80 | * | AS34376 |
| Oct 13, 20:59 UTC | 80 | * | AS26410 |
| Oct 13, 20:44 UTC | 70 | * | AS268151 |
| Oct 13, 20:44 UTC | 70 | * | AS147285 |
| Oct 13, 20:29 UTC | 70 | * | AS38987 |
| Oct 13, 20:29 UTC | 70 | * | AS52749 |
| Oct 13, 20:29 UTC | 70 | * | AS13099 |
| Oct 13, 20:14 UTC | 70 | * | AS135839 |
| Oct 13, 19:59 UTC | 70 | * | AS23105 |
| Oct 13, 19:59 UTC | 70 | * | AS28652 |
| Oct 13, 19:59 UTC | 70 | * | AS52940 |
| Oct 13, 19:59 UTC | 80 | * | AS53086 |
| Oct 13, 19:59 UTC | 80 | * | AS18245 |
| Oct 13, 19:59 UTC | 70 | * | AS263084 |
| Oct 13, 19:59 UTC | 70 | * | AS265041 |
| Oct 13, 19:59 UTC | 70 | * | AS356 |
| Oct 13, 19:59 UTC | 70 | * | AS262278 |
| Oct 13, 19:59 UTC | 70 | * | AS52714 |
| Oct 13, 19:59 UTC | 70 | * | AS263083 |
| Oct 13, 19:59 UTC | 70 | * | AS28239 |
| Oct 13, 19:59 UTC | 70 | * | AS53050 |
| Oct 13, 19:59 UTC | 70 | * | AS263495 |
| Oct 13, 19:59 UTC | 70 | * | AS271023 |
| Oct 13, 19:44 UTC | 70 | * | AS61696 |
| Oct 13, 19:44 UTC | 70 | * | AS61923 |
| Oct 13, 19:44 UTC | 80 | * | AS268273 |
| Oct 13, 19:44 UTC | 70 | * | AS28287 |
| Oct 13, 19:44 UTC | 80 | * | AS266399 |
| Oct 13, 19:44 UTC | 80 | * | AS268222 |
| Oct 13, 19:44 UTC | 70 | * | AS262346 |
| Oct 13, 19:44 UTC | 70 | * | AS262757 |
| Oct 13, 19:44 UTC | 70 | * | AS263520 |
| Oct 13, 19:44 UTC | 70 | * | AS262839 |
| Oct 13, 19:44 UTC | 70 | * | AS263322 |
| Oct 13, 19:44 UTC | 70 | * | AS263028 |
| Oct 13, 19:44 UTC | 80 | * | AS53171 |
| Oct 13, 19:44 UTC | 70 | * | AS262706 |
| Oct 13, 19:44 UTC | 70 | * | AS28195 |
| Oct 13, 19:44 UTC | 70 | * | AS266207 |
| Oct 13, 19:44 UTC | 70 | * | AS52575 |
| Oct 13, 19:44 UTC | 70 | * | AS61844 |
| Oct 13, 19:44 UTC | 80 | * | AS270689 |
| Oct 13, 19:44 UTC | 70 | * | AS265933 |
| Oct 13, 19:44 UTC | 70 | * | AS28263 |
| Oct 13, 19:44 UTC | 70 | * | AS262591 |
| Oct 13, 19:44 UTC | 80 | * | AS266165 |
| Oct 13, 19:44 UTC | 80 | * | AS52638 |
| Oct 13, 19:44 UTC | 70 | * | AS266211 |
| Oct 13, 19:44 UTC | 70 | * | AS262708 |
| Oct 13, 19:44 UTC | 80 | * | AS265106 |
| Oct 13, 19:44 UTC | 80 | * | AS52855 |
| Oct 13, 19:44 UTC | 70 | * | AS28666 |
| Oct 13, 19:44 UTC | 70 | * | AS28166 |
| Oct 13, 19:44 UTC | 80 | * | AS268782 |
| Oct 13, 19:44 UTC | 70 | * | AS268829 |
| Oct 13, 19:44 UTC | 70 | * | AS262986 |
| Oct 13, 19:44 UTC | 80 | * | AS264217 |
| Oct 13, 19:44 UTC | 70 | * | AS262722 |
| Oct 13, 19:44 UTC | 80 | * | AS264929 |
| Oct 13, 19:44 UTC | 70 | * | AS263432 |
| Oct 13, 19:44 UTC | 80 | * | AS263907 |
Frequently Asked Questions
What is a BGP Sudden withdrawal event?
A withdrawal event is when an origin AS stops announcing prefixes it was routing. We flag ASNs whose active-prefix count dropped by 50% or more in the last hour versus the 1–7h baseline, because large sudden withdrawals can indicate an outage, a fibre cut, a de-peering, or route-leak fallout.
Where does this data come from?
Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.
How often is the Sudden withdrawal event feed updated?
The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-10-14 07:50 UTC.
How do I subscribe to Sudden withdrawal event events?
Subscribe to the Atom feed at /pulse/bgp/withdrawal.atom or poll the JSON endpoint at /api/pulse/bgp/withdrawal.