Reputation · trust score
A transparent 0–100 signal. Every entity starts at a neutral baseline of 65; threat-intel blocklists, exposure, reverse-DNS, routing and allocation each adjust it up or down. Higher is more trustworthy.
- Baseline (neutral) 65
- Active-threat / abuse risk −12
- Enterprise allocation +4
- Trust score 57 / 100
Experimental · trust-vectors model v1.2.1 — a transparent heuristic, not a definitive verdict. How it works →
⚠ 70 MOAS prefixes — multiple origin ASNs detected
All MOAS anomalies →A previously stable prefix originated by AS21859 is now also announced by another ASN (MOAS — Multiple-Origin AS), detected from our RIPE RIS collectors. Often benign (anycast, multi-homing, or a recent transfer) — but it can signal a route leak or prefix hijack, so it's worth inspecting.
| Prefix | Origin ASNs | Last detected (UTC) |
|---|---|---|
| 154.193.129.0/24 | AS21859, AS131274 | 2026-10-12 23:28:48 |
| 104.234.62.0/24 | AS21859, AS198566 | 2026-10-12 23:28:48 |
| 128.1.152.0/24 | AS21859, AS62610 | 2026-10-12 23:28:48 |
| 128.1.28.0/24 | AS21859, AS62610 | 2026-10-12 23:28:48 |
| 128.14.68.0/24 | AS21859, AS62610 | 2026-10-12 23:28:48 |
| 103.103.247.0/24 | AS21859, AS62610 | 2026-10-12 23:28:48 |
| 152.175.215.0/24 | AS8143, AS21859 | 2026-10-12 23:28:48 |
| 172.81.127.0/24 | AS21859, AS62610 | 2026-10-12 23:28:48 |
| 163.5.58.0/24 | AS21859, AS42960 | 2026-10-12 23:28:48 |
| 98.98.74.0/24 | AS21859, AS62610 | 2026-10-12 23:28:48 |
| 128.14.86.0/24 | AS4229, AS21859 | 2026-10-12 23:28:48 |
| 128.1.222.0/24 | AS21859, AS62610 | 2026-10-12 23:28:48 |
| 128.1.24.0/24 | AS21859, AS62610 | 2026-10-12 23:28:48 |
| 198.44.164.0/24 | AS21859, AS62610 | 2026-10-12 23:28:48 |
| 104.234.28.0/24 | AS21859, AS218661 | 2026-10-12 23:28:48 |
Showing the 15 most recently detected of 70 MOAS prefixes. Many multi-origin prefixes on large networks are benign (anycast); see all MOAS anomalies.
Network profile
Source: PeeringDB →Present at 87 internet exchanges: MyIX, LINX LON1: Main, Any2West, DE-CIX Frankfurt: DE-CIX Frankfurt Peering LAN, IX.br (PTT.br) São Paulo: ATM/MPLA, Equinix Hong Kong, NYIIX New York, UAE-IX: UAE-IX Peering LAN, BBIX Tokyo, TPIX-TW, …
Web3 footprint
AS21859 hosts 50 observed decentralized-network nodes across 4 networks. It’s a neutral signal — it does not affect the reputation score. See the full web3 node map.
AS21859 — global IP footprint
Cities where AS21859 has measurable IPv4 allocation. Click any dot to open that city's page. Size and color scale with IP count.
Top CIDR ranges
BGP Announced Prefixes
Live BGP anomalies →Prefixes AS21859 actually originates in BGP, observed across our RIPE RIS collectors. This live routing view can differ from the registry allocation above.
| Prefix | Announcement samples | Last seen |
|---|---|---|
| 98.98.146.0/23 | 658,270 | 2026-10-12 21:54:55 |
| 98.98.21.0/24 | 561,723 | 2026-10-12 23:09:24 |
| 154.201.1.0/24 | 550,119 | 2026-10-12 21:54:28 |
| 156.229.121.0/24 | 542,025 | 2026-10-12 21:54:28 |
| 154.222.87.0/24 | 399,127 | 2026-10-12 23:19:20 |
| 128.1.124.0/24 | 378,283 | 2026-10-12 23:08:14 |
| 192.169.116.0/24 | 355,282 | 2026-10-12 23:08:14 |
| 162.128.19.0/24 | 352,599 | 2026-10-12 23:08:14 |
| 162.128.18.0/24 | 352,079 | 2026-10-12 23:08:14 |
| 162.128.17.0/24 | 351,722 | 2026-10-12 23:08:14 |
| 162.128.58.0/24 | 351,331 | 2026-10-12 23:08:14 |
| 162.128.217.0/24 | 351,169 | 2026-10-12 23:08:14 |
| 154.193.129.0/24 | 316,768 | 2026-10-12 23:19:14 |
| 107.155.63.0/24 | 282,552 | 2026-10-12 23:19:38 |
| 107.155.31.0/24 | 282,057 | 2026-10-12 23:19:38 |
| 45.124.254.0/24 | 273,854 | 2026-10-12 23:19:20 |
| 98.98.156.0/22 | 271,458 | 2026-10-12 23:19:20 |
| 31.216.56.0/24 | 270,153 | 2026-10-12 23:19:20 |
| 98.98.212.0/22 | 269,302 | 2026-10-12 23:19:20 |
| 98.98.218.0/23 | 269,004 | 2026-10-12 23:19:20 |
| 154.28.158.0/24 | 268,597 | 2026-10-12 23:19:20 |
| 107.155.62.0/24 | 265,613 | 2026-10-12 22:49:53 |
| 129.227.194.0/23 | 264,025 | 2026-10-12 23:18:11 |
| 209.177.82.0/24 | 262,116 | 2026-10-12 23:17:09 |
| 122.10.255.0/24 | 261,586 | 2026-10-12 22:50:14 |
| 192.169.104.0/22 | 258,743 | 2026-10-12 22:55:09 |
| 162.128.53.0/24 | 255,141 | 2026-10-12 23:08:14 |
| 45.43.46.0/23 | 255,120 | 2026-10-12 23:19:51 |
| 209.177.90.0/24 | 251,368 | 2026-10-12 23:17:09 |
| 156.59.120.0/23 | 247,100 | 2026-10-12 22:50:14 |
| 156.59.216.0/23 | 246,786 | 2026-10-12 22:49:31 |
| 129.227.104.0/21 | 246,519 | 2026-10-12 22:50:05 |
| 129.227.242.0/23 | 246,387 | 2026-10-12 22:50:00 |
| 129.227.188.0/23 | 246,233 | 2026-10-12 22:50:01 |
| 23.91.108.0/24 | 244,949 | 2026-10-12 22:49:28 |
| 107.155.6.0/24 | 243,500 | 2026-10-12 22:49:53 |
| 128.1.210.0/23 | 243,445 | 2026-10-12 22:50:11 |
| 128.1.116.0/24 | 242,224 | 2026-10-12 22:49:58 |
| 129.227.252.0/22 | 232,696 | 2026-10-12 22:50:01 |
| 45.40.58.0/24 | 231,511 | 2026-10-12 23:19:51 |
| 45.43.44.0/23 | 227,807 | 2026-10-12 23:19:51 |
| 65.255.34.0/24 | 224,683 | 2026-10-12 23:19:51 |
| 65.255.37.0/24 | 224,469 | 2026-10-12 23:19:51 |
| 45.194.112.0/23 | 208,076 | 2026-10-12 23:18:09 |
| 162.128.249.0/24 | 207,915 | 2026-10-12 23:19:40 |
| 129.227.244.0/23 | 203,448 | 2026-10-12 22:49:53 |
| 107.155.39.0/24 | 201,536 | 2026-10-12 22:49:45 |
| 82.39.188.0/24 | 201,319 | 2026-10-12 22:49:56 |
| 162.128.156.0/24 | 201,017 | 2026-10-12 22:49:32 |
| 108.165.80.0/24 | 200,380 | 2026-10-12 22:50:05 |
Showing top 50 of 2,133 announced prefixes by sample volume.
Frequently Asked Questions
What is AS21859?
AS21859 is an Autonomous System Number assigned to Zenlayer Inc. An ASN identifies a network that controls a specific set of IP addresses and determines how traffic is routed across the internet via BGP (Border Gateway Protocol).
How many IP addresses does AS21859 announce?
AS21859 announces 664.8K IPv4 addresses distributed across 844 routed CIDR prefixes. The network is registered in United States.
Who operates AS21859?
AS21859 is operated by Zenlayer Inc. The organization is based in United States. You can view all IP ranges and related ASNs on the organization page.
What country is AS21859 registered in?
AS21859 is registered in United States. This indicates where the network operator is headquartered, though the IP addresses it announces may serve users globally.
