AS202
Operated by CENTURYLINK-LEGACY-LVLT-202 - Level 3 Parent, LLC.
Summary
- // analyst note
- Small legacy origin ASN. WHOIS resolves to Level 3 Parent, LLC (Lumen); live backbone runs under AS3356, AS202's upstream provider. AS202 announces only 8.44.80.0/22 and 0 IPv6. No PeeringDB record for AS202 directly (404). Not RETN Limited (that is AS9002).
- // security note
- NEUTRAL/DATED: no notable public abuse signal found as of 2026-06-19; absent from Spamhaus ASN-DROP; no NANOG abuse thread.
About this ASN.
AS202 is a low-numbered legacy autonomous system number registered under ARIN to Level 3 Parent, LLC, the wholly-owned subsidiary that holds much of the legacy Level 3 Communications address space now operated by Lumen Technologies (NYSE: LUMN, formerly CenturyLink). Level 3 was historically a Tier-1 global backbone carrier; CenturyLink completed its ~$34B acquisition of Level 3 on November 1, 2017 and later rebranded as Lumen. The practical triage point for AS202 is that it is a small, mostly-dormant origin ASN rather than the operator's working backbone: it announces a single IPv4 prefix (8.44.80.0/22, ~1,024 addresses) and zero IPv6, while the active Lumen/Level 3 backbone runs under AS3356. Despite that small footprint, CAIDA records AS202 as a Tier-1 clique member with a customer cone of 86 ASNs and 1.6M+ addresses and an AS rank of 531 — heritage figures consistent with a legacy Tier-1 ASN whose primary blocks are announced through sibling Lumen ASNs. RIPEstat shows the single /22 visible to 323 of 327 RIS peers. RPKI posture for the originated prefix is RPKI-unknown: an ARIN RPKI infrastructure entity (RPKIR-ARIN, registered 2024-06-17, rpki-roa@lumen.com) exists under the org, but no ROA covering 8.44.80.0/22 has been created, so the prefix is unknown rather than invalid. No notable public abuse signal was found as of 2026-06-19 — AS202 is absent from Spamhaus ASN-DROP, and the only public legal actions against Level 3/Lumen (a 2021 DOJ False Claims settlement and a 2014 FTC Safe Harbor consent order) are unrelated to network abuse. Addresses under this ASN are non-portable per Lumen policy: LOAs are only valid while the space is also announced to a Lumen ASN.
- Operator
- Level 3 Parent, LLC (ARIN handle LPL-141), a wholly-owned subsidiary of Lumen Technologies, Inc. (formerly CenturyLink) [Confirmed] — ARIN RDAP autnum/202, lumen.com/en-us/about.html
- Country / RIR
- United States, ARIN [Confirmed] — ARIN RDAP autnum/202
- Allocated
- 2002-06-05 (ARIN autnum top-level registration date — a first-party RIR fact, NOT an IEEE date); last changed 2019-12-04 (org record last changed 2026-04-22 per A1) [Confirmed] — ARIN RDAP autnum/202 (corroborated by A2 operator + A3 routing angles), ipinfo.io/AS202
- AS name
- CENTURYLINK-LEGACY-LVLT-202 [Confirmed] — ARIN RDAP autnum/202
- Org status
- active subsidiary — Level 3 Parent, LLC (Delaware LLC) under Lumen Technologies, Inc. (publicly traded, NYSE: LUMN), HQ 100 CenturyLink Drive, Monroe, LA 71203; technical/admin address 1025 Eldorado Blvd., Broomfield, CO 80021 [Confirmed] — ARIN RDAP, lumen.com/en-us/about.html
- Contacts
- abuse abuse@level3.com / abuse@aup.lumen.com, +1-877-453-8353 (subpoenas fax 844-254-5800); admin/tech ipadmin@lumen.com / ipadmin@centurylink.com; looking glass https://lookingglass.centurylink.com/ [Confirmed] — ARIN RDAP entities LAC56-ARIN, APL7-ARIN
Security/abuse context (NEUTRAL, DATED)
no notable public abuse signal found as of 2026-06-19 — absent from Spamhaus ASN-DROP (lowest entry AS245); CleanTalk/AbuseIPDB ASN queries returned 403/404 so listing status is Unknown there; no NANOG thread cites AS202 as an abuse source. A bgp.he.net "announces bogons" flag could not be enumerated and AS202 is NOT in the global static bogon report [Confirmed for Spamhaus; Likely for NANOG; Unknown for CleanTalk/AbuseIPDB] — spamhaus.org/drop/asndrop.json, bgp.he.net/AS202, bgp.he.net/report/bogons
Network & routing
- Network type
- legacy Tier-1 transit / global backbone heritage; AS202 itself is a small legacy origin ASN routing one /22 via AS3356, which is Lumen/Level 3's primary backbone ASN [Confirmed] — bgp.tools/as/202, bgp.tools/as/3356, en.wikipedia.org/wiki/Level_3_Communications
- Size
- announces 1 IPv4 prefix (8.44.80.0/22, ~1,024 IPs) and 0 IPv6; visible to 323/327 RIS peers (v4), 0/323 (v6); CAIDA customer cone 86 ASNs / 2,217 prefixes / 1,643,248 addresses [Confirmed] — RIPEstat routing-status, CAIDA AS-rank
- Routing/peering
- CAIDA AS rank 531; clique member = true (Tier-1 core); AS degree 79 (78 customers, 0 recorded peers, 1 upstream provider); RIPEstat observes ~78 BGP neighbours [Confirmed] — CAIDA AS-rank, RIPEstat. Lumen settlement-free peering policy is Selective/restrictive (peering@lumen.com; last revised 2021-09-09)[Confirmed] — lumen.com/en-us/about/legal/peering-policy.html
- RPKI
- RPKI-unknown for the sole prefix 8.44.80.0/22 — an RPKI infrastructure entity exists (RPKIR-ARIN, registered 2024-06-17, rpki-roa@lumen.com) but no ROA covers the prefix, so it is unknown, not invalid [Confirmed] — bgp.he.net/AS202, ARIN RDAP entity RPKIR-ARIN
- Notable usage
- legacy Level 3 allocation; Level 3 was the largest US CLEC and a top-3 US fiber backbone before CenturyLink's ~$34B acquisition (completed 2017-11-01) and the later Lumen rebrand; AS202 is a small legacy origin, with primary backbone activity under AS3356[Confirmed] — en.wikipedia.org/wiki/Level_3_Communications, bgp.tools/as/202
- Related ASNs
- AS3356 (Lumen/Level 3 primary backbone, AS202's upstream provider) [Confirmed] — bgp.tools/as/202, bgp.tools/as/3356
- Legal note
- two public enforcement actions touch Level 3/Lumen but are NOT network-abuse and NOT AS202-specific — a 2021 DOJ/EDVA $12.77M False Claims Act settlement (government-contracting kickbacks) and a 2014 FTC Safe Harbor deception consent order (Matter 142-3028) [Confirmed] — oversight.gov, ftc.gov
- Analyst note
- AS202 is Level 3 Parent, LLC (ARIN/US) — not RETN Limited (AS9002). It is a small legacy origin ASN; the operator's working backbone is AS3356. No PeeringDB record was found for AS202 directly (peeringdb.com/asn/202 → 404); the operator's PeeringDB presence is under AS3356.
What this network routes.
- 8.44.80.0/22
Who it talks to.
| ASN | Operator | Role |
|---|---|---|
| AS3356 | — | upstream |
| AS16988 | — | downstream |
| AS199563 | — | downstream |
| AS16701 | — | downstream |
| AS13720 | — | downstream |
| AS29575 | — | downstream |
| AS10753 | — | downstream |
| AS7876 | — | downstream |
| AS19113 | — | downstream |
| AS26425 | — | downstream |
| AS401547 | — | downstream |
| AS401548 | — | downstream |
| AS23503 | — | downstream |
| AS14762 | — | downstream |
| AS54781 | — | downstream |
| AS396943 | — | downstream |
| AS9084 | — | downstream |
| AS59241 | — | downstream |
| AS4983 | — | downstream |
| AS6071 | — | downstream |