Pulse — Sudden withdrawal event
ASNs whose active prefix count dropped by ≥50% in the last hour vs. the 1–7h baseline — outages, DDoS-blackhole, route leak fallout.
What is Sudden withdrawal event?
A withdrawal event is when an origin AS stops announcing prefixes it was routing. We flag ASNs whose active-prefix count dropped by 50% or more in the last hour versus the 1–7h baseline, because large sudden withdrawals can indicate an outage, a fibre cut, a de-peering, or route-leak fallout.
Geographic distribution
Flagged events
Showing 200 most recent of 270 · last 24h| When | Severity | Prefix | AS |
|---|---|---|---|
| Oct 16, 23:14 UTC | 80 | * | AS9294 |
| Oct 16, 23:14 UTC | 80 | * | AS398340 |
| Oct 16, 23:14 UTC | 70 | * | AS269538 |
| Oct 16, 23:14 UTC | 70 | * | AS262480 |
| Oct 16, 23:14 UTC | 80 | * | AS7821 |
| Oct 16, 23:14 UTC | 80 | * | AS215721 |
| Oct 16, 23:14 UTC | 80 | * | AS1651 |
| Oct 16, 23:14 UTC | 80 | * | AS27759 |
| Oct 16, 22:59 UTC | 70 | * | AS28227 |
| Oct 16, 22:59 UTC | 80 | * | AS267268 |
| Oct 16, 22:59 UTC | 70 | * | AS12654 |
| Oct 16, 22:59 UTC | 70 | * | AS212259 |
| Oct 16, 22:59 UTC | 70 | * | AS209596 |
| Oct 16, 22:44 UTC | 70 | * | AS4759 |
| Oct 16, 22:44 UTC | 80 | * | AS136716 |
| Oct 16, 22:29 UTC | 70 | * | AS52898 |
| Oct 16, 22:29 UTC | 70 | * | AS59147 |
| Oct 16, 22:14 UTC | 70 | * | AS36969 |
| Oct 16, 21:44 UTC | 70 | * | AS834 |
| Oct 16, 21:44 UTC | 80 | * | AS18245 |
| Oct 16, 21:44 UTC | 70 | * | AS37545 |
| Oct 16, 21:29 UTC | 70 | * | AS53134 |
| Oct 16, 21:29 UTC | 80 | * | AS137951 |
| Oct 16, 21:29 UTC | 70 | * | AS31972 |
| Oct 16, 20:59 UTC | 70 | * | AS394475 |
| Oct 16, 20:59 UTC | 80 | * | AS402069 |
| Oct 16, 20:59 UTC | 70 | * | AS262437 |
| Oct 16, 20:44 UTC | 70 | * | AS198721 |
| Oct 16, 20:44 UTC | 70 | * | AS199324 |
| Oct 16, 20:29 UTC | 70 | * | AS59169 |
| Oct 16, 19:44 UTC | 70 | * | AS52913 |
| Oct 16, 19:29 UTC | 80 | * | AS35807 |
| Oct 16, 19:14 UTC | 70 | * | AS52875 |
| Oct 16, 18:59 UTC | 80 | * | AS267560 |
| Oct 16, 18:59 UTC | 80 | * | AS37506 |
| Oct 16, 18:59 UTC | 80 | * | AS262898 |
| Oct 16, 18:59 UTC | 70 | * | AS37531 |
| Oct 16, 18:44 UTC | 80 | * | AS266436 |
| Oct 16, 18:29 UTC | 80 | * | AS23842 |
| Oct 16, 18:29 UTC | 70 | * | AS33490 |
| Oct 16, 18:29 UTC | 70 | * | AS44692 |
| Oct 16, 18:29 UTC | 80 | * | AS16039 |
| Oct 16, 18:14 UTC | 80 | * | AS137346 |
| Oct 16, 17:59 UTC | 70 | * | AS147034 |
| Oct 16, 17:59 UTC | 80 | * | AS152689 |
| Oct 16, 17:59 UTC | 80 | * | AS268544 |
| Oct 16, 17:59 UTC | 80 | * | AS149978 |
| Oct 16, 17:59 UTC | 80 | * | AS153383 |
| Oct 16, 17:59 UTC | 80 | * | AS141738 |
| Oct 16, 17:44 UTC | 70 | * | AS47065 |
| Oct 16, 16:44 UTC | 70 | * | AS17764 |
| Oct 16, 16:29 UTC | 70 | * | AS43142 |
| Oct 16, 16:14 UTC | 70 | * | AS201446 |
| Oct 16, 15:59 UTC | 80 | * | AS8711 |
| Oct 16, 15:14 UTC | 70 | * | AS25429 |
| Oct 16, 14:59 UTC | 70 | * | AS263573 |
| Oct 16, 14:59 UTC | 70 | * | AS328866 |
| Oct 16, 14:44 UTC | 80 | * | AS206867 |
| Oct 16, 14:14 UTC | 80 | * | AS134905 |
| Oct 16, 13:59 UTC | 70 | * | AS328490 |
| Oct 16, 13:59 UTC | 70 | * | AS138771 |
| Oct 16, 13:59 UTC | 70 | * | AS48887 |
| Oct 16, 13:59 UTC | 80 | * | AS59165 |
| Oct 16, 13:44 UTC | 70 | * | AS24175 |
| Oct 16, 13:14 UTC | 70 | * | AS262820 |
| Oct 16, 12:59 UTC | 70 | * | AS267013 |
| Oct 16, 12:59 UTC | 80 | * | AS262773 |
| Oct 16, 12:59 UTC | 70 | * | AS54417 |
| Oct 16, 12:59 UTC | 70 | * | AS53051 |
| Oct 16, 12:59 UTC | 80 | * | AS13053 |
| Oct 16, 12:44 UTC | 80 | * | AS274181 |
| Oct 16, 12:29 UTC | 70 | * | AS268581 |
| Oct 16, 12:29 UTC | 70 | * | AS262839 |
| Oct 16, 12:14 UTC | 80 | * | AS21947 |
| Oct 16, 11:44 UTC | 70 | * | AS209693 |
| Oct 16, 11:44 UTC | 80 | * | AS31960 |
| Oct 16, 11:44 UTC | 70 | * | AS25306 |
| Oct 16, 10:59 UTC | 70 | * | AS38778 |
| Oct 16, 10:59 UTC | 80 | * | AS49729 |
| Oct 16, 10:44 UTC | 70 | * | AS263015 |
| Oct 16, 10:29 UTC | 80 | * | AS133240 |
| Oct 16, 09:44 UTC | 70 | * | AS37154 |
| Oct 16, 09:29 UTC | 80 | * | AS273090 |
| Oct 16, 08:44 UTC | 80 | * | AS402898 |
| Oct 16, 08:29 UTC | 80 | * | AS264657 |
| Oct 16, 08:14 UTC | 80 | * | AS10353 |
| Oct 16, 08:14 UTC | 70 | * | AS265561 |
| Oct 16, 07:59 UTC | 70 | * | AS60713 |
| Oct 16, 07:44 UTC | 80 | * | AS265771 |
| Oct 16, 07:44 UTC | 70 | * | AS61772 |
| Oct 16, 07:44 UTC | 80 | * | AS269978 |
| Oct 16, 07:29 UTC | 70 | * | AS39863 |
| Oct 16, 07:29 UTC | 80 | * | AS271071 |
| Oct 16, 07:29 UTC | 70 | * | AS5410 |
| Oct 16, 07:29 UTC | 70 | * | AS266749 |
| Oct 16, 07:14 UTC | 70 | * | AS329153 |
| Oct 16, 07:14 UTC | 80 | * | AS262996 |
| Oct 16, 07:14 UTC | 80 | * | AS271938 |
| Oct 16, 06:59 UTC | 70 | * | AS264169 |
| Oct 16, 06:44 UTC | 70 | * | AS21491 |
| Oct 16, 06:44 UTC | 80 | * | AS49608 |
| Oct 16, 06:44 UTC | 70 | * | AS395506 |
| Oct 16, 06:29 UTC | 80 | * | AS396010 |
| Oct 16, 06:29 UTC | 80 | * | AS397836 |
| Oct 16, 05:59 UTC | 80 | * | AS267373 |
| Oct 16, 05:59 UTC | 70 | * | AS4454 |
| Oct 16, 05:59 UTC | 70 | * | AS27893 |
| Oct 16, 05:59 UTC | 80 | * | AS52772 |
| Oct 16, 05:14 UTC | 70 | * | AS38773 |
| Oct 16, 04:59 UTC | 70 | * | AS53047 |
| Oct 16, 04:59 UTC | 70 | * | AS271023 |
| Oct 16, 04:59 UTC | 70 | * | AS28195 |
| Oct 16, 04:59 UTC | 80 | * | AS268222 |
| Oct 16, 04:59 UTC | 70 | * | AS263432 |
| Oct 16, 04:59 UTC | 70 | * | AS52575 |
| Oct 16, 04:59 UTC | 80 | * | AS52638 |
| Oct 16, 04:59 UTC | 70 | * | AS262770 |
| Oct 16, 04:59 UTC | 70 | * | AS61844 |
| Oct 16, 04:59 UTC | 80 | * | AS268205 |
| Oct 16, 04:59 UTC | 70 | * | AS262986 |
| Oct 16, 04:59 UTC | 70 | * | AS266211 |
| Oct 16, 04:59 UTC | 70 | * | AS262708 |
| Oct 16, 04:59 UTC | 80 | * | AS268782 |
| Oct 16, 04:59 UTC | 70 | * | AS52686 |
| Oct 16, 04:59 UTC | 80 | * | AS264217 |
| Oct 16, 04:59 UTC | 70 | * | AS23105 |
| Oct 16, 04:59 UTC | 80 | * | AS264929 |
| Oct 16, 04:59 UTC | 80 | * | AS266166 |
| Oct 16, 04:59 UTC | 70 | * | AS263028 |
| Oct 16, 04:59 UTC | 80 | * | AS263907 |
| Oct 16, 04:59 UTC | 70 | * | AS263266 |
| Oct 16, 04:59 UTC | 70 | * | AS53196 |
| Oct 16, 04:59 UTC | 70 | * | AS61696 |
| Oct 16, 04:59 UTC | 70 | * | AS22356 |
| Oct 16, 04:59 UTC | 70 | * | AS262565 |
| Oct 16, 04:59 UTC | 70 | * | AS263520 |
| Oct 16, 04:59 UTC | 70 | * | AS28640 |
| Oct 16, 04:59 UTC | 70 | * | AS53080 |
| Oct 16, 04:59 UTC | 70 | * | AS52982 |
| Oct 16, 04:59 UTC | 70 | * | AS52940 |
| Oct 16, 04:59 UTC | 70 | * | AS262346 |
| Oct 16, 04:59 UTC | 70 | * | AS263265 |
| Oct 16, 04:59 UTC | 70 | * | AS262758 |
| Oct 16, 04:59 UTC | 70 | * | AS28239 |
| Oct 16, 04:59 UTC | 70 | * | AS272539 |
| Oct 16, 04:59 UTC | 70 | * | AS262478 |
| Oct 16, 04:59 UTC | 70 | * | AS263537 |
| Oct 16, 04:59 UTC | 70 | * | AS263322 |
| Oct 16, 04:59 UTC | 80 | * | AS264223 |
| Oct 16, 04:59 UTC | 70 | * | AS262706 |
| Oct 16, 04:59 UTC | 80 | * | AS53171 |
| Oct 16, 04:59 UTC | 70 | * | AS53087 |
| Oct 16, 04:59 UTC | 70 | * | AS262285 |
| Oct 16, 04:59 UTC | 80 | * | AS26592 |
| Oct 16, 04:59 UTC | 80 | * | AS14237 |
| Oct 16, 04:59 UTC | 70 | * | AS266207 |
| Oct 16, 04:59 UTC | 80 | * | AS270689 |
| Oct 16, 04:59 UTC | 70 | * | AS28263 |
| Oct 16, 04:59 UTC | 70 | * | AS262757 |
| Oct 16, 04:59 UTC | 80 | * | AS53119 |
| Oct 16, 04:59 UTC | 90 | * | AS28669 |
| Oct 16, 04:59 UTC | 70 | * | AS262470 |
| Oct 16, 04:59 UTC | 70 | * | AS263495 |
| Oct 16, 04:59 UTC | 70 | * | AS53178 |
| Oct 16, 04:59 UTC | 70 | * | AS262272 |
| Oct 16, 04:59 UTC | 70 | * | AS61851 |
| Oct 16, 04:59 UTC | 70 | * | AS28334 |
| Oct 16, 04:59 UTC | 70 | * | AS265175 |
| Oct 16, 04:59 UTC | 80 | * | AS268106 |
| Oct 16, 04:59 UTC | 70 | * | AS262722 |
| Oct 16, 04:59 UTC | 70 | * | AS262444 |
| Oct 16, 04:59 UTC | 70 | * | AS262675 |
| Oct 16, 04:59 UTC | 70 | * | AS52758 |
| Oct 16, 04:59 UTC | 70 | * | AS264023 |
| Oct 16, 04:59 UTC | 80 | * | AS52856 |
| Oct 16, 04:59 UTC | 70 | * | AS262998 |
| Oct 16, 04:59 UTC | 70 | * | AS263442 |
| Oct 16, 04:59 UTC | 70 | * | AS52870 |
| Oct 16, 04:59 UTC | 70 | * | AS265937 |
| Oct 16, 04:59 UTC | 70 | * | AS53231 |
| Oct 16, 04:59 UTC | 80 | * | AS268233 |
| Oct 16, 04:59 UTC | 70 | * | AS263336 |
| Oct 16, 04:59 UTC | 70 | * | AS264428 |
| Oct 16, 04:59 UTC | 70 | * | AS52714 |
| Oct 16, 04:59 UTC | 80 | * | AS265923 |
| Oct 16, 04:59 UTC | 70 | * | AS28287 |
| Oct 16, 04:59 UTC | 80 | * | AS266399 |
| Oct 16, 04:59 UTC | 90 | * | AS28667 |
| Oct 16, 04:59 UTC | 80 | * | AS262504 |
| Oct 16, 04:59 UTC | 70 | * | AS268829 |
| Oct 16, 04:59 UTC | 70 | * | AS262417 |
| Oct 16, 04:59 UTC | 70 | * | AS28166 |
| Oct 16, 04:59 UTC | 70 | * | AS53050 |
| Oct 16, 04:59 UTC | 80 | * | AS28649 |
| Oct 16, 04:59 UTC | 80 | * | AS262505 |
| Oct 16, 04:59 UTC | 80 | * | AS268273 |
| Oct 16, 04:59 UTC | 80 | * | AS265106 |
| Oct 16, 04:59 UTC | 70 | * | AS262591 |
| Oct 16, 04:59 UTC | 70 | * | AS28666 |
| Oct 16, 04:59 UTC | 70 | * | AS265933 |
Frequently Asked Questions
What is a BGP Sudden withdrawal event?
A withdrawal event is when an origin AS stops announcing prefixes it was routing. We flag ASNs whose active-prefix count dropped by 50% or more in the last hour versus the 1–7h baseline, because large sudden withdrawals can indicate an outage, a fibre cut, a de-peering, or route-leak fallout.
Where does this data come from?
Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.
How often is the Sudden withdrawal event feed updated?
The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-10-16 23:20 UTC.
How do I subscribe to Sudden withdrawal event events?
Subscribe to the Atom feed at /pulse/bgp/withdrawal.atom or poll the JSON endpoint at /api/pulse/bgp/withdrawal.