Autonomous system
AS21859 ZEN-ECN
Hosting DROP-listed space ARIN
Summary
Zenlayer
cloud edge hosting
A Zenlayer network (ZEN-ECN). Zenlayer is a global edge-cloud and bare-metal provider (US-headquartered, with a large Asia-Pacific footprint) offering compute, networking, and interconnection close to end users.
What it's used for
- Edge compute, bare-metal servers, and global connectivity/CDN-style delivery, especially bridging traffic into and across Asia.
Notable
- An IP here identifies Zenlayer as the host or edge provider, not the operator of whatever runs on it.
- Zenlayer emphasizes low-latency edge locations in emerging markets where hyperscalers have thinner coverage.
Interesting
- Zenlayer built out many edge points of presence across Southeast Asia, India, the Middle East, and Africa, positioning as an on-ramp to hard-to-reach regions.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Interconnection
Peering at a glance
Internet exchanges
Recorded at 68 exchanges in 32 countries, largest first.
| Exchange | Location | Their address |
|---|---|---|
| IX.br (PTT.br) São Paulo | São Paulo, Brazil | 187.16.222.18 |
| DE-CIX Frankfurt | Frankfurt, Germany | 80.81.193.187 |
| Indonesian Internet Exchange (IIX-Jakarta) | Jakarta, Indonesia | 123.108.9.167 |
| IX.br (PTT.br) Fortaleza | Fortaleza, Brazil | 45.68.74.128 |
| LINX LON1 | London, United Kingdom | 195.66.225.229 |
| Jakarta Internet Exchange | Jakarta, Indonesia | 119.11.184.132 |
| Neutral Internet Exchange | Amsterdam, Netherlands | 193.239.118.219 |
| NAPAfrica IX Johannesburg | Johannesburg, South Africa | 196.60.9.57 |
Transit providers
128 upstream, 215 downstream and 499 adjacent networks observed; most-used upstreams first.
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-10-10, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 997 prefixes · 668K addresses IPv6 168 prefixes
| Country | Name | Prefixes |
|---|---|---|
| US | United States of America | 1,165 |
Registry
Allocation record
- Registry
- ARIN
- Handle
AS21859- Registry name
- ZEN-ECN
- Registrant
- Zenlayer Inc
- Abuse contact
- abuse@zenlayer.com
- Registered
- 2013-04-02
- Last changed
- 2021-07-17
- Allocation
- assigned
Routing security
RPKI and IRR
- RPKI
- 69% valid · 1,314 valid, 568 with no ROA 17 RPKI-invalid
- ROAs
- 863 authorising AS21859
- ASPA
- no ASPA record
- IRR
- 98% registered · 1,864 of 1,899 announcements 18 other origin
- Route objects
- 2,914 naming AS21859
Reputation
Classification and threat
Hosting Datacenter or cloud provider. Addresses are servers, not people.
Spamhaus DROP
Not on ASN-DROP The network as a whole is not listed.
5 DROP matches Announced space overlapping the DROP prefix list.
| Announced | DROP entry | Record |
|---|---|---|
| 98.98.192.0/20 | 98.98.195.0/24 | SBL656003 |
| 103.39.110.0/24 | 103.39.108.0/22 | SBL697967 |
| 172.247.38.0/23 | 172.247.38.0/24 | SBL608973 |
| 199.241.0.0/21 | 199.241.0.0/21 | SBL521778 |
| 204.115.128.0/21 | 204.115.128.0/21 | SBL521782 |
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 431 networks and 1,775 prefixes, as published 2026-10-11. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
No IC3 indicators Nothing from the FBI IC3 feed.
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere