Pulse — Sudden withdrawal event
ASNs whose active prefix count dropped by ≥50% in the last hour vs. the 1–7h baseline — outages, DDoS-blackhole, route leak fallout.
What is Sudden withdrawal event?
A withdrawal event is when an origin AS stops announcing prefixes it was routing. We flag ASNs whose active-prefix count dropped by 50% or more in the last hour versus the 1–7h baseline, because large sudden withdrawals can indicate an outage, a fibre cut, a de-peering, or route-leak fallout.
Geographic distribution
Flagged events
Showing 200 most recent of 210 · last 24h| When | Severity | Prefix | AS |
|---|---|---|---|
| Aug 15, 04:48 UTC | 70 | * | AS35640 |
| Aug 15, 04:48 UTC | 70 | * | AS147060 |
| Aug 15, 04:48 UTC | 70 | * | AS139659 |
| Aug 15, 04:48 UTC | 70 | * | AS216211 |
| Aug 15, 04:48 UTC | 70 | * | AS262504 |
| Aug 15, 04:48 UTC | 70 | * | AS50698 |
| Aug 15, 04:48 UTC | 70 | * | AS154321 |
| Aug 15, 04:48 UTC | 70 | * | AS262825 |
| Aug 15, 04:48 UTC | 70 | * | AS56400 |
| Aug 15, 04:48 UTC | 70 | * | AS50009 |
| Aug 15, 04:48 UTC | 80 | * | AS38511 |
| Aug 15, 04:48 UTC | 80 | * | AS271420 |
| Aug 15, 04:48 UTC | 80 | * | AS265035 |
| Aug 15, 04:48 UTC | 70 | * | AS206945 |
| Aug 15, 04:48 UTC | 80 | * | AS148987 |
| Aug 15, 04:48 UTC | 70 | * | AS44050 |
| Aug 15, 04:48 UTC | 70 | * | AS198721 |
| Aug 15, 04:48 UTC | 80 | * | AS34058 |
| Aug 15, 04:48 UTC | 70 | * | AS134365 |
| Aug 15, 04:48 UTC | 80 | * | AS4628 |
| Aug 15, 04:48 UTC | 80 | * | AS50577 |
| Aug 15, 04:48 UTC | 70 | * | AS12700 |
| Aug 15, 04:48 UTC | 80 | * | AS43709 |
| Aug 15, 04:48 UTC | 70 | * | AS59780 |
| Aug 15, 04:48 UTC | 70 | * | AS201603 |
| Aug 15, 04:48 UTC | 70 | * | AS47546 |
| Aug 15, 04:48 UTC | 70 | * | AS4818 |
| Aug 15, 04:48 UTC | 70 | * | AS43142 |
| Aug 15, 04:48 UTC | 80 | * | AS5384 |
| Aug 15, 04:48 UTC | 70 | * | AS18018 |
| Aug 15, 04:48 UTC | 70 | * | AS60989 |
| Aug 15, 04:48 UTC | 70 | * | AS51500 |
| Aug 15, 04:48 UTC | 80 | * | AS137951 |
| Aug 15, 04:48 UTC | 70 | * | AS30833 |
| Aug 15, 04:48 UTC | 70 | * | AS59665 |
| Aug 15, 04:48 UTC | 70 | * | AS28173 |
| Aug 15, 04:48 UTC | 70 | * | AS28183 |
| Aug 15, 04:48 UTC | 70 | * | AS39199 |
| Aug 15, 04:48 UTC | 70 | * | AS197133 |
| Aug 15, 04:48 UTC | 80 | * | AS12041 |
| Aug 15, 04:48 UTC | 80 | * | AS24492 |
| Aug 15, 04:48 UTC | 80 | * | AS24570 |
| Aug 15, 04:48 UTC | 80 | * | AS147019 |
| Aug 15, 04:48 UTC | 70 | * | AS262497 |
| Aug 15, 04:48 UTC | 70 | * | AS35539 |
| Aug 15, 04:48 UTC | 70 | * | AS62166 |
| Aug 15, 04:48 UTC | 70 | * | AS60316 |
| Aug 15, 04:48 UTC | 80 | * | AS49403 |
| Aug 15, 04:48 UTC | 80 | * | AS210482 |
| Aug 15, 04:48 UTC | 70 | * | AS48293 |
| Aug 15, 04:48 UTC | 70 | * | AS204832 |
| Aug 15, 04:48 UTC | 70 | * | AS202204 |
| Aug 15, 04:48 UTC | 70 | * | AS199324 |
| Aug 15, 04:48 UTC | 70 | * | AS53196 |
| Aug 15, 04:48 UTC | 70 | * | AS24232 |
| Aug 15, 04:48 UTC | 70 | * | AS265973 |
| Aug 15, 04:48 UTC | 70 | * | AS265279 |
| Aug 15, 04:48 UTC | 70 | * | AS49542 |
| Aug 15, 04:48 UTC | 70 | * | AS9785 |
| Aug 15, 04:48 UTC | 70 | * | AS17983 |
| Aug 15, 04:48 UTC | 80 | * | AS263641 |
| Aug 15, 04:48 UTC | 70 | * | AS264461 |
| Aug 15, 04:48 UTC | 70 | * | AS28227 |
| Aug 15, 04:48 UTC | 90 | * | AS35807 |
| Aug 15, 04:48 UTC | 80 | * | AS202024 |
| Aug 15, 04:48 UTC | 70 | * | AS138089 |
| Aug 15, 04:48 UTC | 70 | * | AS50130 |
| Aug 15, 04:48 UTC | 80 | * | AS134729 |
| Aug 15, 04:48 UTC | 70 | * | AS50780 |
| Aug 15, 04:48 UTC | 80 | * | AS59637 |
| Aug 15, 04:48 UTC | 70 | * | AS133772 |
| Aug 15, 04:48 UTC | 70 | * | AS262582 |
| Aug 15, 04:48 UTC | 80 | * | AS17501 |
| Aug 15, 04:48 UTC | 70 | * | AS24544 |
| Aug 15, 04:48 UTC | 70 | * | AS16019 |
| Aug 15, 04:48 UTC | 70 | * | AS131151 |
| Aug 15, 04:48 UTC | 80 | * | AS148990 |
| Aug 15, 04:48 UTC | 70 | * | AS4546 |
| Aug 15, 04:48 UTC | 70 | * | AS21309 |
| Aug 15, 04:48 UTC | 80 | * | AS215721 |
| Aug 15, 04:48 UTC | 70 | * | AS38042 |
| Aug 15, 04:33 UTC | 80 | * | AS7821 |
| Aug 15, 04:33 UTC | 70 | * | AS138156 |
| Aug 15, 04:33 UTC | 90 | * | AS48434 |
| Aug 15, 04:33 UTC | 70 | * | AS33891 |
| Aug 15, 04:33 UTC | 70 | * | AS207266 |
| Aug 15, 04:33 UTC | 70 | * | AS43648 |
| Aug 15, 04:33 UTC | 80 | * | AS50673 |
| Aug 15, 04:33 UTC | 70 | * | AS263888 |
| Aug 15, 04:33 UTC | 70 | * | AS39719 |
| Aug 15, 04:33 UTC | 70 | * | AS41497 |
| Aug 15, 04:33 UTC | 80 | * | AS28949 |
| Aug 15, 04:33 UTC | 70 | * | AS209137 |
| Aug 15, 04:33 UTC | 80 | * | AS51407 |
| Aug 15, 04:33 UTC | 70 | * | AS62468 |
| Aug 15, 04:33 UTC | 70 | * | AS401615 |
| Aug 15, 04:33 UTC | 80 | * | AS55933 |
| Aug 15, 04:18 UTC | 70 | * | AS35575 |
| Aug 15, 04:18 UTC | 70 | * | AS35826 |
| Aug 15, 04:18 UTC | 70 | * | AS262565 |
| Aug 15, 04:18 UTC | 80 | * | AS14920 |
| Aug 15, 04:18 UTC | 70 | * | AS44521 |
| Aug 15, 04:18 UTC | 90 | * | AS47331 |
| Aug 15, 04:18 UTC | 70 | * | AS133865 |
| Aug 15, 04:18 UTC | 70 | * | AS199284 |
| Aug 15, 04:18 UTC | 80 | * | AS58789 |
| Aug 15, 04:18 UTC | 80 | * | AS63168 |
| Aug 15, 04:18 UTC | 70 | * | AS31747 |
| Aug 15, 04:18 UTC | 70 | * | AS39960 |
| Aug 15, 04:18 UTC | 70 | * | AS210258 |
| Aug 15, 04:18 UTC | 80 | * | AS55547 |
| Aug 15, 04:18 UTC | 80 | * | AS51597 |
| Aug 15, 04:18 UTC | 70 | * | AS149175 |
| Aug 15, 04:18 UTC | 70 | * | AS9927 |
| Aug 15, 04:18 UTC | 80 | * | AS15502 |
| Aug 15, 04:18 UTC | 70 | * | AS45644 |
| Aug 15, 04:18 UTC | 70 | * | AS38444 |
| Aug 15, 04:18 UTC | 80 | * | AS136803 |
| Aug 15, 04:18 UTC | 70 | * | AS41362 |
| Aug 15, 04:18 UTC | 80 | * | AS18801 |
| Aug 15, 04:18 UTC | 80 | * | AS39370 |
| Aug 15, 04:18 UTC | 70 | * | AS40026 |
| Aug 15, 04:18 UTC | 70 | * | AS328638 |
| Aug 15, 04:18 UTC | 70 | * | AS25655 |
| Aug 15, 04:18 UTC | 70 | * | AS51622 |
| Aug 15, 04:18 UTC | 70 | * | AS36905 |
| Aug 15, 04:18 UTC | 70 | * | AS7163 |
| Aug 15, 04:18 UTC | 70 | * | AS11985 |
| Aug 15, 04:18 UTC | 70 | * | AS327926 |
| Aug 15, 04:18 UTC | 70 | * | AS41435 |
| Aug 15, 04:18 UTC | 80 | * | AS131232 |
| Aug 15, 04:18 UTC | 70 | * | AS61373 |
| Aug 15, 04:18 UTC | 70 | * | AS61159 |
| Aug 15, 04:18 UTC | 70 | * | AS27482 |
| Aug 15, 04:18 UTC | 70 | * | AS31725 |
| Aug 15, 04:18 UTC | 70 | * | AS57800 |
| Aug 15, 04:18 UTC | 70 | * | AS42510 |
| Aug 15, 04:18 UTC | 70 | * | AS28876 |
| Aug 15, 04:18 UTC | 80 | * | AS16378 |
| Aug 15, 04:18 UTC | 70 | * | AS207234 |
| Aug 15, 04:18 UTC | 70 | * | AS42905 |
| Aug 15, 04:18 UTC | 80 | * | AS4249 |
| Aug 15, 04:18 UTC | 80 | * | AS138559 |
| Aug 15, 04:18 UTC | 70 | * | AS197039 |
| Aug 15, 04:18 UTC | 70 | * | AS18434 |
| Aug 15, 04:18 UTC | 80 | * | AS202161 |
| Aug 15, 04:18 UTC | 80 | * | AS56478 |
| Aug 15, 04:18 UTC | 70 | * | AS31158 |
| Aug 15, 04:18 UTC | 70 | * | AS23881 |
| Aug 15, 04:18 UTC | 70 | * | AS9474 |
| Aug 15, 04:03 UTC | 70 | * | AS8257 |
| Aug 15, 04:03 UTC | 70 | * | AS31272 |
| Aug 15, 04:03 UTC | 70 | * | AS48326 |
| Aug 15, 04:03 UTC | 70 | * | AS36864 |
| Aug 15, 04:03 UTC | 70 | * | AS31252 |
| Aug 15, 04:03 UTC | 80 | * | AS204080 |
| Aug 15, 04:03 UTC | 70 | * | AS25189 |
| Aug 15, 04:03 UTC | 80 | * | AS41201 |
| Aug 15, 04:03 UTC | 90 | * | AS207590 |
| Aug 15, 04:03 UTC | 70 | * | AS42387 |
| Aug 15, 04:03 UTC | 70 | * | AS15958 |
| Aug 15, 04:03 UTC | 70 | * | AS208800 |
| Aug 15, 04:03 UTC | 70 | * | AS265175 |
| Aug 15, 04:03 UTC | 70 | * | AS13246 |
| Aug 15, 04:03 UTC | 80 | * | AS57433 |
| Aug 15, 04:03 UTC | 80 | * | AS1680 |
| Aug 15, 04:03 UTC | 70 | * | AS24875 |
| Aug 15, 04:03 UTC | 70 | * | AS201706 |
| Aug 15, 03:48 UTC | 70 | * | AS35745 |
| Aug 15, 03:48 UTC | 70 | * | AS201019 |
| Aug 15, 03:48 UTC | 70 | * | AS12654 |
| Aug 15, 03:48 UTC | 80 | * | AS196883 |
| Aug 15, 03:48 UTC | 70 | * | AS42910 |
| Aug 15, 03:48 UTC | 70 | * | AS58321 |
| Aug 15, 03:48 UTC | 70 | * | AS264562 |
| Aug 15, 03:48 UTC | 70 | * | AS44061 |
| Aug 15, 03:48 UTC | 80 | * | AS201966 |
| Aug 15, 03:48 UTC | 70 | * | AS28327 |
| Aug 15, 03:48 UTC | 70 | * | AS29522 |
| Aug 15, 03:48 UTC | 80 | * | AS207668 |
| Aug 15, 03:48 UTC | 70 | * | AS41297 |
| Aug 15, 03:48 UTC | 70 | * | AS140952 |
| Aug 15, 03:48 UTC | 80 | * | AS198317 |
| Aug 15, 03:48 UTC | 70 | * | AS29596 |
| Aug 15, 03:48 UTC | 70 | * | AS198187 |
| Aug 15, 03:48 UTC | 80 | * | AS47901 |
| Aug 15, 03:48 UTC | 80 | * | AS20552 |
| Aug 15, 03:48 UTC | 70 | * | AS39582 |
| Aug 15, 03:48 UTC | 70 | * | AS200539 |
| Aug 15, 03:48 UTC | 70 | * | AS28178 |
| Aug 15, 03:48 UTC | 80 | * | AS27759 |
| Aug 15, 03:48 UTC | 80 | * | AS41421 |
| Aug 15, 03:48 UTC | 70 | * | AS47702 |
| Aug 15, 03:48 UTC | 70 | * | AS202050 |
| Aug 15, 03:37 UTC | 70 | * | AS7768 |
| Aug 15, 03:37 UTC | 70 | * | AS269986 |
| Aug 15, 03:37 UTC | 80 | * | AS266185 |
| Aug 15, 03:37 UTC | 80 | * | AS203290 |
| Aug 15, 03:37 UTC | 70 | * | AS56582 |
| Aug 15, 03:37 UTC | 80 | * | AS265091 |
Frequently Asked Questions
What is a BGP Sudden withdrawal event?
A withdrawal event is when an origin AS stops announcing prefixes it was routing. We flag ASNs whose active-prefix count dropped by 50% or more in the last hour versus the 1–7h baseline, because large sudden withdrawals can indicate an outage, a fibre cut, a de-peering, or route-leak fallout.
Where does this data come from?
Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.
How often is the Sudden withdrawal event feed updated?
The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-08-15 04:50 UTC.
How do I subscribe to Sudden withdrawal event events?
Subscribe to the Atom feed at /pulse/bgp/withdrawal.atom or poll the JSON endpoint at /api/pulse/bgp/withdrawal.