AS21859
Zenlayer Inc
AS21859 is an Autonomous System — a group of IP networks managed under a single routing policy — operated by Zenlayer Inc, announcing routes from US. ScanMalware.com has recorded 826 public scans of 785 distinct URLs hosted on this network, the earliest from 2025-09-30 and the most recent from 2026-08-20.
In current BGP routing data, AS21859 announces 41,579 IPv4 prefixes and 3,658 IPv6 prefixes, and is reached through 27 observed upstream providers. A network's routing footprint and transit relationships are useful context for judging whether a hosted site sits on established infrastructure or on a network with a pattern of abuse.
Upstream transit providers
These Autonomous Systems are most frequently seen forwarding traffic for AS21859 in BGP routing tables — they form its effective transit and peering profile.
- AS4229 — ZEN-NET(23 paths)
- AS6939 — HURRICANE(16 paths)
- AS2914 — NTT-DATA-2914(9 paths)
- AS3257 — GTT-BACKBONE GTT Communications Inc.(6 paths)
- AS9498 — BBIL-AP BHARTI Airtel Ltd.(5 paths)
- AS4775 — GLOBE-TELECOM-AS Globe Telecoms(4 paths)
- AS8966 — Etisalat-AS EMIRATES TELECOMMUNICATIONS GROUP COMPANY (ETISALAT GROUP) PJSC(4 paths)
- AS4788 — TTSSB-MY TM TECHNOLOGY SERVICES SDN. BHD.(3 paths)
- AS174 — COGENT-174(3 paths)
- AS1299 — TWELVE99 Arelion Sweden AB(3 paths)
Recent public scans on AS21859
A rolling sample of recent public scans of hosts on this network. Listing a site here is not a safety judgement — open a scan to see its full verdict.
| Site | Scanned |
|---|---|
| 502 Bad Gateway https://pull-x4-h5-hls.douyincdn.com | 2026-08-20 |
| https://static.republika.co.id | 2026-08-19 |
| image-cdn-nct-vn-idvmd5p.qiniudns.com https://image-cdn-nct-vn-idvmd5p.qiniudns.com | 2026-08-19 |
| https://configdownload-drru.dbankcdn.ru | 2026-08-18 |
| Hytera - Innovate for a Safer World - Hytera https://hytera.com | 2026-08-17 |
| https://pull-w5-sg01.tiktokrow-cdn.com.c.bytefcdn-oversea.com | 2026-08-17 |
| upgrade https://buz-app.com | 2026-08-16 |
| 返利网(fanli.com)-精选全网购物优惠,为美好生活而省 https://fanli.com | 2026-08-14 |
Open the full AS21859 search interface — filters, pagination and BGP detail →
Frequently asked questions about AS21859
- Does hosting a site on AS21859 make it unsafe?
- No. AS21859 is a network operated by Zenlayer Inc, and like any Autonomous System it carries a mix of legitimate and malicious sites. Hosting location is context, not a verdict — ScanMalware scores each scanned page on its own content, scripts and behaviour.
- How many sites on AS21859 has ScanMalware scanned?
- ScanMalware has recorded 826 public scans across 785 distinct URLs hosted on AS21859. The figure updates as new URLs on this network are submitted.
- Which networks provide transit for AS21859?
- In the BGP paths ScanMalware observes, AS21859 is most often reached through AS4229 (ZEN-NET), AS6939 (HURRICANE) and AS2914 (NTT-DATA-2914). These upstream providers form the network's effective transit profile.
How ScanMalware builds this profile
ScanMalware.com performs public URL scans with a real headless browser, then maps each scanned host to its current ASN ownership and BGP routing context. This profile is built from those scans plus live routing data — the IP prefixes AS21859 announces, the networks that transit it, and the country it operates from — letting you pivot from one suspicious host to the wider network it sits on.
Browse more profiled networks on the ASN index, or scan a URL to see its hosting network.