AS21859 — Zenlayer Inc Threat Intelligence

Network Threat Summary

AS21859 (Zenlayer Inc) has 37,702 malicious IP addresses with 531,022 abuse reports across 40 countries. First activity recorded 2022-08-21, most recent activity 2026-10-13.

Threat Profile: The primary attack categories observed from this network are reconnaissance, malware infrastructure, reputation low. This network shows significant threat activity well above the global median, warranting enhanced monitoring. Affected countries include PT, US, NL.

Risk Assessment: HIGH - Significant threat activity originates from this network. Enhanced monitoring and aggressive IP blocking are recommended.

Top Attack Categories

• Reconnaissance 111,560 reports
• Malware Infrastructure 29,455 reports
• Reputation Low 26,702 reports
• Aggregated Threat 13,759 reports
• Suspicious Activity 13,457 reports

Top Affected Countries

• PT 159,437 reports
• US 85,223 reports
• NL 16,237 reports

Most Reported IPs

• 128.1.34.69 990 reports
• 185.180.141.12 939 reports
• 109.105.210.57 938 reports
• 185.180.141.7 936 reports
• 185.226.196.12 935 reports

Lookup an IP or Network

Check any IP address for threat intelligence or browse other ASNs.

Access ASN Intelligence via API

Integrate AS21859 threat data into your security stack with our REST API.

See how we classify and verify threats →