Pulse — Sudden withdrawal event
ASNs whose active prefix count dropped by ≥50% in the last hour vs. the 1–7h baseline — outages, DDoS-blackhole, route leak fallout.
Events last 24h
3,195
Most recent
Showing
200
Refresh
● every 60s
What is Sudden withdrawal event?
A withdrawal event is when an origin AS stops announcing prefixes it was routing. We flag ASNs whose active-prefix count dropped by 50% or more in the last hour versus the 1–7h baseline, because large sudden withdrawals can indicate an outage, a fibre cut, a de-peering, or route-leak fallout.
Geographic distribution
Flagged events
Showing 200 most recent of 3,195 · last 24h| When | Severity | Prefix | AS |
|---|---|---|---|
| Aug 30, 14:39 UTC | 70 | * | AS28227 |
| Aug 30, 14:39 UTC | 80 | * | AS264173 |
| Aug 30, 14:39 UTC | 70 | * | AS26881 |
| Aug 30, 14:39 UTC | 70 | * | AS32524 |
| Aug 30, 14:39 UTC | 80 | * | AS134040 |
| Aug 30, 14:39 UTC | 80 | * | AS262460 |
| Aug 30, 14:39 UTC | 70 | * | AS61713 |
| Aug 30, 14:39 UTC | 80 | * | AS271640 |
| Aug 30, 14:39 UTC | 70 | * | AS9751 |
| Aug 30, 14:39 UTC | 80 | * | AS271041 |
| Aug 30, 14:39 UTC | 70 | * | AS44284 |
| Aug 30, 14:39 UTC | 70 | * | AS40564 |
| Aug 30, 14:39 UTC | 70 | * | AS11700 |
| Aug 30, 14:39 UTC | 70 | * | AS61888 |
| Aug 30, 14:39 UTC | 70 | * | AS52967 |
| Aug 30, 14:39 UTC | 80 | * | AS53043 |
| Aug 30, 14:39 UTC | 80 | * | AS270262 |
| Aug 30, 14:39 UTC | 80 | * | AS140867 |
| Aug 30, 14:39 UTC | 80 | * | AS269500 |
| Aug 30, 14:39 UTC | 70 | * | AS262565 |
| Aug 30, 14:39 UTC | 80 | * | AS53108 |
| Aug 30, 14:39 UTC | 70 | * | AS265279 |
| Aug 30, 14:39 UTC | 70 | * | AS40861 |
| Aug 30, 14:39 UTC | 80 | * | AS23471 |
| Aug 30, 14:39 UTC | 80 | * | AS271630 |
| Aug 30, 14:39 UTC | 70 | * | AS28189 |
| Aug 30, 14:39 UTC | 70 | * | AS264987 |
| Aug 30, 14:39 UTC | 80 | * | AS7821 |
| Aug 30, 14:39 UTC | 80 | * | AS51511 |
| Aug 30, 14:39 UTC | 80 | * | AS30822 |
| Aug 30, 14:39 UTC | 80 | * | AS270723 |
| Aug 30, 14:39 UTC | 80 | * | AS263042 |
| Aug 30, 14:39 UTC | 80 | * | AS17040 |
| Aug 30, 14:39 UTC | 70 | * | AS270724 |
| Aug 30, 14:39 UTC | 80 | * | AS273991 |
| Aug 30, 14:39 UTC | 80 | * | AS265232 |
| Aug 30, 14:39 UTC | 80 | * | AS264250 |
| Aug 30, 14:39 UTC | 80 | * | AS40727 |
| Aug 30, 14:39 UTC | 80 | * | AS28577 |
| Aug 30, 14:39 UTC | 80 | * | AS394541 |
| Aug 30, 14:39 UTC | 80 | * | AS52770 |
| Aug 30, 14:39 UTC | 80 | * | AS268201 |
| Aug 30, 14:39 UTC | 80 | * | AS43201 |
| Aug 30, 14:39 UTC | 80 | * | AS266189 |
| Aug 30, 14:39 UTC | 70 | * | AS264426 |
| Aug 30, 14:39 UTC | 70 | * | AS28177 |
| Aug 30, 14:39 UTC | 80 | * | AS51955 |
| Aug 30, 14:39 UTC | 80 | * | AS262844 |
| Aug 30, 14:39 UTC | 70 | * | AS399646 |
| Aug 30, 14:39 UTC | 70 | * | AS263103 |
| Aug 30, 14:39 UTC | 80 | * | AS268748 |
| Aug 30, 14:39 UTC | 80 | * | AS263485 |
| Aug 30, 14:39 UTC | 70 | * | AS262505 |
| Aug 30, 14:39 UTC | 80 | * | AS270763 |
| Aug 30, 14:39 UTC | 80 | * | AS264592 |
| Aug 30, 14:39 UTC | 80 | * | AS149766 |
| Aug 30, 14:39 UTC | 70 | * | AS16908 |
| Aug 30, 14:39 UTC | 70 | * | AS262986 |
| Aug 30, 14:39 UTC | 80 | * | AS26932 |
| Aug 30, 14:39 UTC | 80 | * | AS213382 |
| Aug 30, 14:39 UTC | 80 | * | AS264294 |
| Aug 30, 14:39 UTC | 70 | * | AS58952 |
| Aug 30, 14:39 UTC | 80 | * | AS63852 |
| Aug 30, 14:39 UTC | 80 | * | AS61745 |
| Aug 30, 14:39 UTC | 80 | * | AS16891 |
| Aug 30, 14:39 UTC | 80 | * | AS266331 |
| Aug 30, 14:39 UTC | 70 | * | AS262498 |
| Aug 30, 14:39 UTC | 70 | * | AS52376 |
| Aug 30, 14:39 UTC | 70 | * | AS28243 |
| Aug 30, 14:39 UTC | 80 | * | AS273803 |
| Aug 30, 14:39 UTC | 80 | * | AS262628 |
| Aug 30, 14:39 UTC | 80 | * | AS24492 |
| Aug 30, 14:39 UTC | 70 | * | AS11183 |
| Aug 30, 14:39 UTC | 70 | * | AS11228 |
| Aug 30, 14:39 UTC | 70 | * | AS28278 |
| Aug 30, 14:39 UTC | 70 | * | AS61636 |
| Aug 30, 14:39 UTC | 80 | * | AS54706 |
| Aug 30, 14:39 UTC | 70 | * | AS12654 |
| Aug 30, 14:39 UTC | 80 | * | AS271401 |
| Aug 30, 14:39 UTC | 80 | * | AS52746 |
| Aug 30, 14:39 UTC | 70 | * | AS28666 |
| Aug 30, 14:39 UTC | 80 | * | AS52991 |
| Aug 30, 14:39 UTC | 70 | * | AS266915 |
| Aug 30, 14:39 UTC | 70 | * | AS4818 |
| Aug 30, 14:39 UTC | 80 | * | AS267077 |
| Aug 30, 14:39 UTC | 70 | * | AS52596 |
| Aug 30, 14:39 UTC | 80 | * | AS269446 |
| Aug 30, 14:39 UTC | 70 | * | AS264114 |
| Aug 30, 14:39 UTC | 80 | * | AS270688 |
| Aug 30, 14:39 UTC | 70 | * | AS262301 |
| Aug 30, 14:39 UTC | 80 | * | AS263155 |
| Aug 30, 14:39 UTC | 70 | * | AS266427 |
| Aug 30, 14:39 UTC | 80 | * | AS28066 |
| Aug 30, 14:39 UTC | 70 | * | AS263579 |
| Aug 30, 14:39 UTC | 80 | * | AS36225 |
| Aug 30, 14:39 UTC | 70 | * | AS267348 |
| Aug 30, 14:39 UTC | 70 | * | AS138152 |
| Aug 30, 14:39 UTC | 80 | * | AS28658 |
| Aug 30, 14:39 UTC | 80 | * | AS266572 |
| Aug 30, 14:39 UTC | 70 | * | AS262669 |
| Aug 30, 14:39 UTC | 70 | * | AS52473 |
| Aug 30, 14:39 UTC | 80 | * | AS262947 |
| Aug 30, 14:39 UTC | 80 | * | AS270271 |
| Aug 30, 14:39 UTC | 70 | * | AS262851 |
| Aug 30, 14:39 UTC | 70 | * | AS263559 |
| Aug 30, 14:39 UTC | 80 | * | AS268275 |
| Aug 30, 14:39 UTC | 70 | * | AS53013 |
| Aug 30, 14:39 UTC | 80 | * | AS267638 |
| Aug 30, 14:39 UTC | 70 | * | AS15171 |
| Aug 30, 14:39 UTC | 80 | * | AS268186 |
| Aug 30, 14:39 UTC | 80 | * | AS36986 |
| Aug 30, 14:39 UTC | 70 | * | AS262842 |
| Aug 30, 14:39 UTC | 80 | * | AS269401 |
| Aug 30, 14:39 UTC | 80 | * | AS394284 |
| Aug 30, 14:39 UTC | 70 | * | AS262352 |
| Aug 30, 14:39 UTC | 80 | * | AS268556 |
| Aug 30, 14:39 UTC | 80 | * | AS273782 |
| Aug 30, 14:39 UTC | 80 | * | AS52251 |
| Aug 30, 14:39 UTC | 80 | * | AS268231 |
| Aug 30, 14:39 UTC | 70 | * | AS267117 |
| Aug 30, 14:39 UTC | 80 | * | AS266591 |
| Aug 30, 14:39 UTC | 80 | * | AS271664 |
| Aug 30, 14:39 UTC | 70 | * | AS34999 |
| Aug 30, 14:39 UTC | 70 | * | AS273309 |
| Aug 30, 14:39 UTC | 70 | * | AS271410 |
| Aug 30, 14:39 UTC | 70 | * | AS39558 |
| Aug 30, 14:39 UTC | 80 | * | AS36504 |
| Aug 30, 14:39 UTC | 80 | * | AS267126 |
| Aug 30, 14:39 UTC | 80 | * | AS262379 |
| Aug 30, 14:39 UTC | 70 | * | AS397735 |
| Aug 30, 14:39 UTC | 70 | * | AS262494 |
| Aug 30, 14:39 UTC | 80 | * | AS46414 |
| Aug 30, 14:39 UTC | 70 | * | AS52861 |
| Aug 30, 14:39 UTC | 80 | * | AS264166 |
| Aug 30, 14:39 UTC | 70 | * | AS53218 |
| Aug 30, 14:39 UTC | 70 | * | AS263479 |
| Aug 30, 14:39 UTC | 70 | * | AS327700 |
| Aug 30, 14:39 UTC | 80 | * | AS263159 |
| Aug 30, 14:39 UTC | 80 | * | AS265042 |
| Aug 30, 14:39 UTC | 70 | * | AS32829 |
| Aug 30, 14:39 UTC | 80 | * | AS271626 |
| Aug 30, 14:39 UTC | 80 | * | AS266598 |
| Aug 30, 14:39 UTC | 80 | * | AS28333 |
| Aug 30, 14:39 UTC | 70 | * | AS212772 |
| Aug 30, 14:39 UTC | 80 | * | AS262764 |
| Aug 30, 14:39 UTC | 70 | * | AS263439 |
| Aug 30, 14:39 UTC | 80 | * | AS137951 |
| Aug 30, 14:39 UTC | 70 | * | AS263474 |
| Aug 30, 14:39 UTC | 80 | * | AS273371 |
| Aug 30, 14:39 UTC | 70 | * | AS262428 |
| Aug 30, 14:39 UTC | 70 | * | AS31490 |
| Aug 30, 14:39 UTC | 80 | * | AS28099 |
| Aug 30, 14:39 UTC | 80 | * | AS262360 |
| Aug 30, 14:39 UTC | 80 | * | AS37442 |
| Aug 30, 14:39 UTC | 80 | * | AS131445 |
| Aug 30, 14:39 UTC | 80 | * | AS263031 |
| Aug 30, 14:39 UTC | 70 | * | AS11676 |
| Aug 30, 14:39 UTC | 80 | * | AS263408 |
| Aug 30, 14:39 UTC | 80 | * | AS40631 |
| Aug 30, 14:39 UTC | 70 | * | AS998 |
| Aug 30, 14:39 UTC | 80 | * | AS269027 |
| Aug 30, 14:39 UTC | 70 | * | AS52952 |
| Aug 30, 14:39 UTC | 70 | * | AS269612 |
| Aug 30, 14:39 UTC | 70 | * | AS262824 |
| Aug 30, 14:39 UTC | 80 | * | AS52564 |
| Aug 30, 14:39 UTC | 70 | * | AS33236 |
| Aug 30, 14:39 UTC | 70 | * | AS28184 |
| Aug 30, 14:39 UTC | 70 | * | AS207266 |
| Aug 30, 14:39 UTC | 70 | * | AS262491 |
| Aug 30, 14:39 UTC | 70 | * | AS53196 |
| Aug 30, 14:39 UTC | 70 | * | AS395479 |
| Aug 30, 14:39 UTC | 80 | * | AS52965 |
| Aug 30, 14:39 UTC | 70 | * | AS23106 |
| Aug 30, 14:39 UTC | 70 | * | AS55189 |
| Aug 30, 14:39 UTC | 80 | * | AS269481 |
| Aug 30, 14:39 UTC | 80 | * | AS270269 |
| Aug 30, 14:39 UTC | 80 | * | AS263137 |
| Aug 30, 14:39 UTC | 80 | * | AS55045 |
| Aug 30, 14:39 UTC | 80 | * | AS267472 |
| Aug 30, 14:39 UTC | 80 | * | AS28576 |
| Aug 30, 14:39 UTC | 70 | * | AS30021 |
| Aug 30, 14:39 UTC | 70 | * | AS263888 |
| Aug 30, 14:39 UTC | 80 | * | AS263078 |
| Aug 30, 14:39 UTC | 80 | * | AS262496 |
| Aug 30, 14:39 UTC | 70 | * | AS135161 |
| Aug 30, 14:39 UTC | 80 | * | AS52565 |
| Aug 30, 14:39 UTC | 80 | * | AS264332 |
| Aug 30, 14:39 UTC | 80 | * | AS27759 |
| Aug 30, 14:39 UTC | 80 | * | AS262167 |
| Aug 30, 14:39 UTC | 80 | * | AS270623 |
| Aug 30, 14:24 UTC | 70 | * | AS266081 |
| Aug 30, 14:24 UTC | 80 | * | AS267717 |
| Aug 30, 14:24 UTC | 70 | * | AS28634 |
| Aug 30, 14:24 UTC | 70 | * | AS52947 |
| Aug 30, 14:24 UTC | 80 | * | AS265027 |
| Aug 30, 14:24 UTC | 80 | * | AS270884 |
| Aug 30, 14:24 UTC | 70 | * | AS269167 |
| Aug 30, 14:24 UTC | 80 | * | AS265267 |
| Aug 30, 14:24 UTC | 70 | * | AS197133 |
| Aug 30, 14:24 UTC | 80 | * | AS268280 |
Frequently Asked Questions
What is a BGP Sudden withdrawal event?
A withdrawal event is when an origin AS stops announcing prefixes it was routing. We flag ASNs whose active-prefix count dropped by 50% or more in the last hour versus the 1–7h baseline, because large sudden withdrawals can indicate an outage, a fibre cut, a de-peering, or route-leak fallout.
Where does this data come from?
Every event is detected from live BGP updates collected across 23 RIPE RIS route collectors worldwide, ingested into a ClickHouse time-series store and re-evaluated every few minutes. No third-party feed is resold; the analysis is original to WorldIP.io.
How often is the Sudden withdrawal event feed updated?
The feed recomputes roughly every 5 minutes; it was last refreshed at 2026-08-30 14:40 UTC.
How do I subscribe to Sudden withdrawal event events?
Subscribe to the Atom feed at /pulse/bgp/withdrawal.atom or poll the JSON endpoint at /api/pulse/bgp/withdrawal.
