AS21859
Zenlayer Inc
AS21859 is an Autonomous System — a group of IP networks managed under a single routing policy — operated by Zenlayer Inc, announcing routes from US. ScanMalware.com has recorded 779 public scans of 738 distinct URLs hosted on this network, the earliest from 2025-09-30 and the most recent from 2026-07-06.
In current BGP routing data, AS21859 announces 41,579 IPv4 prefixes and 3,658 IPv6 prefixes, and is reached through 27 observed upstream providers. A network's routing footprint and transit relationships are useful context for judging whether a hosted site sits on established infrastructure or on a network with a pattern of abuse.
Upstream transit providers
These Autonomous Systems are most frequently seen forwarding traffic for AS21859 in BGP routing tables — they form its effective transit and peering profile.
- AS4229 — ZEN-NET(23 paths)
- AS6939 — HURRICANE(16 paths)
- AS2914 — NTT-DATA-2914(9 paths)
- AS3257 — GTT-BACKBONE GTT Communications Inc.(6 paths)
- AS9498 — BBIL-AP BHARTI Airtel Ltd.(5 paths)
- AS4775 — GLOBE-TELECOM-AS Globe Telecoms(4 paths)
- AS8966 — Etisalat-AS EMIRATES TELECOMMUNICATIONS GROUP COMPANY (ETISALAT GROUP) PJSC(4 paths)
- AS4788 — TTSSB-MY TM TECHNOLOGY SERVICES SDN. BHD.(3 paths)
- AS174 — COGENT-174(3 paths)
- AS1299 — TWELVE99 Arelion Sweden AB(3 paths)
Recent public scans on AS21859
A rolling sample of recent public scans of hosts on this network. Listing a site here is not a safety judgement — open a scan to see its full verdict.
| Site | Scanned |
|---|---|
| api16-eeft-approval.feishu.cn.c.dsa.cdnbuild.net https://api16-eeft-approval.feishu.cn.c.dsa.cdnbuild.net | 2026-07-06 |
| 404 Not Found https://plussvr.kdocs.cn | 2026-07-06 |
| pull-hs-f5.flive.douyincdn.com.c.volcfcdndvs.com https://pull-hs-f5.flive.douyincdn.com.c.volcfcdndvs.com | 2026-07-03 |
| Index of /config https://thingytracker.online/config/ | 2026-07-02 |
| 学堂在线 - 精品在线课程学习平台 https://xuetangx.com | 2026-07-02 |
| WPS Office - Free Office Download for PC & Mobile, Alternative to MS Office https://www.wps.com/d/?from=t&clicksrc=klink&sa=601.1092&sid=sbOakr0DMQuVLa6r_bgher8123ody… | 2026-07-01 |
| https://aweray.com | 2026-07-01 |
| WPS 365 https://eu.docworkspace.com/d/sbOakr0DMQuVLa6r_bgher8123odynsxyro?sa=601.1074 | 2026-06-30 |
Open the full AS21859 search interface — filters, pagination and BGP detail →
Frequently asked questions about AS21859
- Does hosting a site on AS21859 make it unsafe?
- No. AS21859 is a network operated by Zenlayer Inc, and like any Autonomous System it carries a mix of legitimate and malicious sites. Hosting location is context, not a verdict — ScanMalware scores each scanned page on its own content, scripts and behaviour.
- How many sites on AS21859 has ScanMalware scanned?
- ScanMalware has recorded 779 public scans across 738 distinct URLs hosted on AS21859. The figure updates as new URLs on this network are submitted.
- Which networks provide transit for AS21859?
- In the BGP paths ScanMalware observes, AS21859 is most often reached through AS4229 (ZEN-NET), AS6939 (HURRICANE) and AS2914 (NTT-DATA-2914). These upstream providers form the network's effective transit profile.
How ScanMalware builds this profile
ScanMalware.com performs public URL scans with a real headless browser, then maps each scanned host to its current ASN ownership and BGP routing context. This profile is built from those scans plus live routing data — the IP prefixes AS21859 announces, the networks that transit it, and the country it operates from — letting you pivot from one suspicious host to the wider network it sits on.
Browse more profiled networks on the ASN index, or scan a URL to see its hosting network.