AS560
Operated by LVLT-560 - Level 3 Parent, LLC.
Summary
- // analyst note
- Dormant infrastructure ASN under Level 3 Parent, LLC (Lumen). Allocated_date is a first-party ARIN RDAP autnum top-level registration fact (2002-06-05), recorded per the RIR-vs-IEEE distinction. Live routing runs under AS3356.
- // security note
- NEUTRAL/DATED: no notable public abuse signal found as of 2026-07-11; absent from Spamhaus ASN-DROP; no AS560-specific NANOG or BGP-hijack reports found.
About this ASN.
AS560 is an ARIN-registered autonomous system held by Level 3 Parent, LLC (ARIN org handle LPL-141), a subsidiary of Lumen Technologies, Inc. (NYSE: LUMN), the company formerly known as CenturyLink before its September 2020 rebrand. The ARIN RDAP autnum object's top-level registration event dates the allocation to 2002-06-05, with a last-changed timestamp of 2018-02-20; both are first-party RIR facts distinct from the several nested entity (POC/org/RPKI-contact) records attached to the same autnum, which carry unrelated later dates and are not the ASN's own registration event. Operationally, AS560 is dormant: every routing source consulted — RIPEstat, CAIDA AS Rank, bgp.he.net, and bgp.tools — agrees it currently announces zero IPv4 and zero IPv6 prefixes, has no visible BGP peers or upstreams, and sits in a singleton customer cone (itself only). It was last visible in the global routing table on 2025-01-13, historically originating a single IPv6 prefix (2620:11b:e0f1::/48) and, going back to 2013-12-21, one IPv4 /24 (204.160.103.0/24). Lumen's actual internet-backbone operations run under the much larger AS3356, not AS560. No notable public abuse signal was found for AS560 as of 2026-07-11.
- Operator
- Level 3 Parent, LLC (org handle LPL-141), subsidiary of Lumen Technologies, Inc. (formerly CenturyLink, Inc., renamed Sept. 2020) [Confirmed] — https://rdap.arin.net/registry/autnum/560, https://ir.lumen.com/overview/default.aspx
- Country / RIR
- US, ARIN [Confirmed] — https://rdap.arin.net/registry/autnum/560
- Allocated
- 2002-06-05 (ARIN RDAP autnum top-level registration event, re-fetched with --max-bytes 0 after the initial payload truncated it behind the large entities[] block); last changed 2018-02-20 [Confirmed] — https://rdap.arin.net/registry/autnum/560 (corroborated by https://whois.ipip.net/AS560 showing the same registered/last-updated pair)
- Org status
- Active per ARIN registry record, with live contacts (abuse@level3.com, ipadmin@lumen.com, ipadmin@centurylink.com, rpki-roa@lumen.com) despite no current route announcements [Confirmed] — https://rdap.arin.net/registry/autnum/560
Security/abuse context (neutral, dated)
no notable public abuse signal found as of 2026-07-11 — AS560 is absent from Spamhaus's published ASN-DROP list; targeted searches of NANOG archives and BGP-hijack/route-leak reporting surfaced no AS560-specific incidents. Interactive per-ASN reputation databases (Cisco Talos, AbuseIPDB aggregate view) could not be queried directly, so those remain unverified rather than asserted clean
Network & routing
- Network type
- no independent operational classification for AS560 itself; org-level IPinfo classification is "ISP, Business or Hosting." Lumen's actual operating backbone ASN (AS3356) is classified NSP [Likely] — https://ipinfo.io/AS560, https://www.peeringdb.com/net/504
- Size / routing status
- dormant — 0 IPv4 and 0 IPv6 prefixes currently announced; not visible in the global routing table since 2025-01-13; first seen 2013-12-21 originating 204.160.103.0/24; historically originated 2620:11b:e0f1::/48 (IPv6)[Confirmed] — https://stat.ripe.net/AS560, https://bgp.he.net/AS560, https://bgp.tools/as/560
- Customer cone / rank
- CAIDA AS Rank 79459 (cliqueMember=false); customer cone = singleton (numberAsns=1, numberPrefixes=0, numberAddresses=0); no upstreams or peers observed (asnDegree.provider=0, peer=0) [Confirmed] — https://asrank.caida.org/asns/560
- Peering
- AS560 has no own PeeringDB network record (peeringdb.com/asn/560 returns 404, checked live). Lumen's actual peering/operating ASN AS3356 runs a Restrictive policy requiring international peering [Confirmed for AS3356; not applicable to AS560 itself] — https://www.peeringdb.com/asn/560, https://www.peeringdb.com/net/504
- RPKI
- not directly assessable for AS560 — no announced prefixes means no ROAs to validate. ARIN RDAP lists a dedicated "RPKIR-ARIN" entity (role: routing, remark "For creating ROA's," contact rpki-roa@lumen.com), showing Lumen maintains an org-wide RPKI/ROA process, but no live ROA state is confirmed for AS560 specifically[Likely] — https://rdap.arin.net/registry/autnum/560
- Notable usage
- dormant infrastructure ASN; Lumen's real internet-backbone traffic runs under AS3356 (100+Tbps global scope, Restrictive PeeringDB policy), not AS560. No documented reason for AS560's continued dormant registration was found [Confirmed dormancy; Unknown reason for retention] — https://bgp.he.net/AS560, https://www.peeringdb.com/net/504
- Related ASNs
- AS3356 (Lumen/Level 3 Parent, LLC's actual operating backbone ASN; an intra-org relationship, not a true transit upstream of AS560) [Likely] — https://bgp.he.net/AS560, https://asrank.caida.org/asns/560
- Geo footprint
- registrant addresses in Monroe, LA 71203 and Broomfield, CO 80021, United States (Lumen/CenturyLink corporate addresses per RDAP vCards); CAIDA reports country US with lat/long both 0 (placeholder, not a real geolocation)[Confirmed] — https://rdap.arin.net/registry/autnum/560, https://asrank.caida.org/asns/560
- ASN / AS name
- AS560, LVLT-560 [Confirmed] — https://rdap.arin.net/registry/autnum/560, https://whois.ipip.net/AS560
- Analyst note
- registration is a first-party ARIN fact (2002-06-05) and is recorded, not nulled, per project rule distinguishing RIR registry dates from IEEE OUI database-artifact dates. AS560 is administratively active but operationally dormant since Jan 2025; do not confuse it with Lumen's actively-routed AS3356.