Pulse — Sudden withdrawal event
ASNs whose active prefix count dropped by ≥50% in the last hour vs. the 1–7h baseline — outages, DDoS-blackhole, route leak fallout.
What is Sudden withdrawal event?
A withdrawal event is when an origin AS stops announcing prefixes it was routing. We flag ASNs whose active-prefix count dropped by 50% or more in the last hour versus the 1–7h baseline, because large sudden withdrawals can indicate an outage, a fibre cut, a de-peering, or route-leak fallout.
Geographic distribution
Flagged events
Showing 200 most recent of 2,943 · last 24h| When | Severity | Prefix | AS |
|---|---|---|---|
| Aug 22, 06:12 UTC | 80 | * | AS55045 |
| Aug 22, 06:12 UTC | 80 | * | AS32524 |
| Aug 22, 06:12 UTC | 80 | * | AS148990 |
| Aug 22, 06:12 UTC | 80 | * | AS7821 |
| Aug 22, 06:12 UTC | 70 | * | AS262565 |
| Aug 22, 06:12 UTC | 70 | * | AS23471 |
| Aug 22, 06:12 UTC | 80 | * | AS17040 |
| Aug 22, 06:12 UTC | 70 | * | AS17983 |
| Aug 22, 06:12 UTC | 80 | * | AS394541 |
| Aug 22, 06:12 UTC | 70 | * | AS267013 |
| Aug 22, 06:12 UTC | 70 | * | AS43142 |
| Aug 22, 06:12 UTC | 80 | * | AS40727 |
| Aug 22, 06:12 UTC | 70 | * | AS399646 |
| Aug 22, 06:12 UTC | 70 | * | AS54723 |
| Aug 22, 06:12 UTC | 70 | * | AS11700 |
| Aug 22, 06:12 UTC | 80 | * | AS267320 |
| Aug 22, 06:12 UTC | 70 | * | AS265279 |
| Aug 22, 06:12 UTC | 80 | * | AS395246 |
| Aug 22, 06:12 UTC | 80 | * | AS264592 |
| Aug 22, 06:12 UTC | 70 | * | AS16908 |
| Aug 22, 06:12 UTC | 80 | * | AS135478 |
| Aug 22, 06:12 UTC | 70 | * | AS6109 |
| Aug 22, 06:12 UTC | 70 | * | AS28227 |
| Aug 22, 06:12 UTC | 70 | * | AS327700 |
| Aug 22, 06:12 UTC | 70 | * | AS55361 |
| Aug 22, 06:12 UTC | 70 | * | AS33236 |
| Aug 22, 06:12 UTC | 70 | * | AS9435 |
| Aug 22, 06:12 UTC | 80 | * | AS148987 |
| Aug 22, 06:12 UTC | 70 | * | AS136210 |
| Aug 22, 06:12 UTC | 70 | * | AS328200 |
| Aug 22, 06:12 UTC | 70 | * | AS201603 |
| Aug 22, 06:12 UTC | 70 | * | AS59116 |
| Aug 22, 06:12 UTC | 70 | * | AS46378 |
| Aug 22, 06:12 UTC | 70 | * | AS48326 |
| Aug 22, 06:12 UTC | 70 | * | AS134729 |
| Aug 22, 06:12 UTC | 70 | * | AS395479 |
| Aug 22, 06:12 UTC | 80 | * | AS266268 |
| Aug 22, 06:12 UTC | 80 | * | AS4787 |
| Aug 22, 06:12 UTC | 80 | * | AS46414 |
| Aug 22, 06:12 UTC | 70 | * | AS55189 |
| Aug 22, 06:12 UTC | 70 | * | AS397735 |
| Aug 22, 06:12 UTC | 70 | * | AS30021 |
| Aug 22, 06:12 UTC | 70 | * | AS263888 |
| Aug 22, 06:12 UTC | 70 | * | AS147060 |
| Aug 22, 06:12 UTC | 80 | * | AS36504 |
| Aug 22, 05:57 UTC | 80 | * | AS138559 |
| Aug 22, 05:57 UTC | 80 | * | AS16378 |
| Aug 22, 05:57 UTC | 70 | * | AS11676 |
| Aug 22, 05:57 UTC | 80 | * | AS202161 |
| Aug 22, 05:57 UTC | 80 | * | AS21899 |
| Aug 22, 05:57 UTC | 70 | * | AS4818 |
| Aug 22, 05:57 UTC | 80 | * | AS131232 |
| Aug 22, 05:57 UTC | 70 | * | AS44521 |
| Aug 22, 05:57 UTC | 70 | * | AS40026 |
| Aug 22, 05:57 UTC | 80 | * | AS329600 |
| Aug 22, 05:57 UTC | 80 | * | AS39370 |
| Aug 22, 05:57 UTC | 80 | * | AS14920 |
| Aug 22, 05:57 UTC | 80 | * | AS19178 |
| Aug 22, 05:57 UTC | 70 | * | AS17371 |
| Aug 22, 05:57 UTC | 70 | * | AS31747 |
| Aug 22, 05:57 UTC | 70 | * | AS133772 |
| Aug 22, 05:57 UTC | 70 | * | AS41362 |
| Aug 22, 05:57 UTC | 80 | * | AS61149 |
| Aug 22, 05:57 UTC | 70 | * | AS135348 |
| Aug 22, 05:57 UTC | 80 | * | AS137951 |
| Aug 22, 05:57 UTC | 70 | * | AS9751 |
| Aug 22, 05:57 UTC | 70 | * | AS24651 |
| Aug 22, 05:57 UTC | 70 | * | AS15160 |
| Aug 22, 05:57 UTC | 80 | * | AS63168 |
| Aug 22, 05:57 UTC | 70 | * | AS58789 |
| Aug 22, 05:57 UTC | 80 | * | AS36225 |
| Aug 22, 05:57 UTC | 70 | * | AS14822 |
| Aug 22, 05:57 UTC | 80 | * | AS27759 |
| Aug 22, 05:57 UTC | 80 | * | AS24570 |
| Aug 22, 05:57 UTC | 70 | * | AS138152 |
| Aug 22, 05:57 UTC | 80 | * | AS147019 |
| Aug 22, 05:57 UTC | 70 | * | AS3911 |
| Aug 22, 05:57 UTC | 70 | * | AS36898 |
| Aug 22, 05:42 UTC | 70 | * | AS28327 |
| Aug 22, 05:42 UTC | 80 | * | AS328984 |
| Aug 22, 05:42 UTC | 80 | * | AS270037 |
| Aug 22, 05:42 UTC | 70 | * | AS51500 |
| Aug 22, 05:42 UTC | 70 | * | AS32528 |
| Aug 22, 05:42 UTC | 70 | * | AS18018 |
| Aug 22, 05:42 UTC | 70 | * | AS134325 |
| Aug 22, 05:42 UTC | 70 | * | AS28178 |
| Aug 22, 05:27 UTC | 70 | * | AS4546 |
| Aug 22, 05:27 UTC | 80 | * | AS4249 |
| Aug 22, 05:27 UTC | 70 | * | AS262519 |
| Aug 22, 05:27 UTC | 70 | * | AS45644 |
| Aug 22, 05:27 UTC | 70 | * | AS18434 |
| Aug 22, 05:27 UTC | 70 | * | AS39960 |
| Aug 22, 05:27 UTC | 70 | * | AS137448 |
| Aug 22, 05:27 UTC | 80 | * | AS18801 |
| Aug 22, 05:27 UTC | 80 | * | AS197039 |
| Aug 22, 05:27 UTC | 70 | * | AS27482 |
| Aug 22, 05:12 UTC | 70 | * | AS6303 |
| Aug 22, 05:12 UTC | 70 | * | AS54706 |
| Aug 22, 05:12 UTC | 80 | * | AS29982 |
| Aug 22, 05:12 UTC | 70 | * | AS48075 |
| Aug 22, 05:12 UTC | 70 | * | AS17380 |
| Aug 22, 05:12 UTC | 70 | * | AS395198 |
| Aug 22, 04:57 UTC | 70 | * | AS26881 |
| Aug 22, 04:57 UTC | 80 | * | AS395344 |
| Aug 22, 04:57 UTC | 70 | * | AS25655 |
| Aug 22, 04:57 UTC | 70 | * | AS25222 |
| Aug 22, 04:57 UTC | 80 | * | AS133354 |
| Aug 22, 04:57 UTC | 70 | * | AS11183 |
| Aug 22, 04:57 UTC | 70 | * | AS9785 |
| Aug 22, 04:57 UTC | 80 | * | AS267076 |
| Aug 22, 04:57 UTC | 70 | * | AS1101 |
| Aug 22, 04:42 UTC | 80 | * | AS137404 |
| Aug 22, 04:27 UTC | 80 | * | AS270468 |
| Aug 22, 04:27 UTC | 70 | * | AS58057 |
| Aug 22, 04:27 UTC | 80 | * | AS50818 |
| Aug 22, 04:12 UTC | 70 | * | AS38426 |
| Aug 22, 04:12 UTC | 70 | * | AS2923 |
| Aug 22, 03:57 UTC | 70 | * | AS2708 |
| Aug 22, 03:42 UTC | 80 | * | AS265300 |
| Aug 22, 03:42 UTC | 70 | * | AS265175 |
| Aug 22, 03:42 UTC | 80 | * | AS264936 |
| Aug 22, 03:42 UTC | 80 | * | AS267447 |
| Aug 22, 03:42 UTC | 70 | * | AS28191 |
| Aug 22, 03:42 UTC | 70 | * | AS269182 |
| Aug 22, 03:42 UTC | 80 | * | AS265257 |
| Aug 22, 03:42 UTC | 70 | * | AS263922 |
| Aug 22, 03:42 UTC | 80 | * | AS264449 |
| Aug 22, 03:42 UTC | 80 | * | AS24492 |
| Aug 22, 03:42 UTC | 70 | * | AS262653 |
| Aug 22, 03:42 UTC | 70 | * | AS52721 |
| Aug 22, 03:42 UTC | 70 | * | AS262753 |
| Aug 22, 03:42 UTC | 70 | * | AS265041 |
| Aug 22, 03:42 UTC | 70 | * | AS263980 |
| Aug 22, 03:42 UTC | 70 | * | AS28182 |
| Aug 22, 03:27 UTC | 70 | * | AS6419 |
| Aug 22, 03:27 UTC | 70 | * | AS15171 |
| Aug 22, 03:27 UTC | 80 | * | AS394284 |
| Aug 22, 03:27 UTC | 70 | * | AS11228 |
| Aug 22, 03:27 UTC | 80 | * | AS393526 |
| Aug 22, 03:27 UTC | 80 | * | AS18282 |
| Aug 22, 03:27 UTC | 80 | * | AS25892 |
| Aug 22, 03:27 UTC | 80 | * | AS43578 |
| Aug 22, 03:27 UTC | 80 | * | AS10010 |
| Aug 22, 03:27 UTC | 70 | * | AS32829 |
| Aug 22, 03:27 UTC | 70 | * | AS40564 |
| Aug 22, 03:27 UTC | 80 | * | AS2514 |
| Aug 22, 03:27 UTC | 80 | * | AS134175 |
| Aug 22, 03:27 UTC | 80 | * | AS4693 |
| Aug 22, 03:12 UTC | 70 | * | AS264035 |
| Aug 22, 03:12 UTC | 80 | * | AS24530 |
| Aug 22, 03:12 UTC | 70 | * | AS23167 |
| Aug 22, 03:12 UTC | 70 | * | AS396990 |
| Aug 22, 03:12 UTC | 70 | * | AS30016 |
| Aug 22, 03:12 UTC | 70 | * | AS12654 |
| Aug 22, 03:12 UTC | 70 | * | AS54623 |
| Aug 22, 03:12 UTC | 70 | * | AS149089 |
| Aug 22, 02:57 UTC | 70 | * | AS135523 |
| Aug 22, 02:57 UTC | 70 | * | AS24435 |
| Aug 22, 02:57 UTC | 70 | * | AS55340 |
| Aug 22, 02:57 UTC | 80 | * | AS17563 |
| Aug 22, 02:57 UTC | 70 | * | AS9595 |
| Aug 22, 02:57 UTC | 80 | * | AS38422 |
| Aug 22, 02:57 UTC | 70 | * | AS150671 |
| Aug 22, 02:57 UTC | 70 | * | AS28171 |
| Aug 22, 02:57 UTC | 70 | * | AS131284 |
| Aug 22, 02:57 UTC | 80 | * | AS7679 |
| Aug 22, 02:57 UTC | 70 | * | AS150683 |
| Aug 22, 02:42 UTC | 70 | * | AS203090 |
| Aug 22, 02:42 UTC | 70 | * | AS216211 |
| Aug 22, 02:42 UTC | 70 | * | AS17411 |
| Aug 22, 02:42 UTC | 70 | * | AS401615 |
| Aug 22, 02:27 UTC | 70 | * | AS9387 |
| Aug 22, 02:27 UTC | 70 | * | AS139879 |
| Aug 22, 02:27 UTC | 80 | * | AS23966 |
| Aug 22, 02:27 UTC | 70 | * | AS131471 |
| Aug 22, 02:27 UTC | 70 | * | AS55501 |
| Aug 22, 02:27 UTC | 70 | * | AS131275 |
| Aug 22, 02:27 UTC | 70 | * | AS209554 |
| Aug 22, 02:27 UTC | 80 | * | AS136969 |
| Aug 22, 02:27 UTC | 70 | * | AS138655 |
| Aug 22, 02:27 UTC | 70 | * | AS152605 |
| Aug 22, 02:27 UTC | 70 | * | AS17539 |
| Aug 22, 02:27 UTC | 80 | * | AS12041 |
| Aug 22, 02:27 UTC | 70 | * | AS38193 |
| Aug 22, 02:27 UTC | 80 | * | AS38713 |
| Aug 22, 02:27 UTC | 70 | * | AS262595 |
| Aug 22, 02:27 UTC | 70 | * | AS133495 |
| Aug 22, 02:27 UTC | 70 | * | AS23750 |
| Aug 22, 02:27 UTC | 80 | * | AS38264 |
| Aug 22, 02:27 UTC | 70 | * | AS17787 |
| Aug 22, 02:27 UTC | 70 | * | AS135407 |
| Aug 22, 02:27 UTC | 70 | * | AS150371 |
| Aug 22, 02:27 UTC | 80 | * | AS135003 |
| Aug 22, 02:27 UTC | 80 | * | AS138368 |
| Aug 22, 02:27 UTC | 70 | * | AS136030 |
| Aug 22, 02:27 UTC | 70 | * | AS38547 |
| Aug 22, 02:12 UTC | 70 | * | AS140599 |
| Aug 22, 02:12 UTC | 80 | * | AS140504 |
| Aug 22, 02:12 UTC | 80 | * | AS266831 |
| Aug 22, 01:27 UTC | 70 | * | AS262550 |
Frequently Asked Questions
What is a BGP Sudden withdrawal event?
A withdrawal event is when an origin AS stops announcing prefixes it was routing. We flag ASNs whose active-prefix count dropped by 50% or more in the last hour versus the 1–7h baseline, because large sudden withdrawals can indicate an outage, a fibre cut, a de-peering, or route-leak fallout.
Where does this data come from?
Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.
How often is the Sudden withdrawal event feed updated?
The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-08-22 06:15 UTC.
How do I subscribe to Sudden withdrawal event events?
Subscribe to the Atom feed at /pulse/bgp/withdrawal.atom or poll the JSON endpoint at /api/pulse/bgp/withdrawal.