Autonomous system
AS18186 NEBULA-GLOBAL - Nebula Global LLC
Hosting DROP-listed space ARIN Network Services
Summary
Nebula Global
hosting business cloud streaming
NEBULA-GLOBAL is the AS handle for Nebula Global LLC, a network services provider.
What it's used for
- The address space carries infrastructure for cloud and streaming services, evidenced by registrant netnames such as
STARCLOUDGLOBAL-HKandSTARCLOUD-GLOBAL-CGNT-NET-12. - The AS announces 216,320 IPv4 addresses across 130 prefixes and 10 IPv6 prefixes, while maintaining 61 observed neighbours, indicating a role focused on hosting and business connectivity rather than pure transit.
Notable
- Registrants include
StarCloudGlobal-HK,STARCLOUD GLOBAL PTE. LTD., andNTT America, Inc.; VIPAR, showing a mix of corporate entities and leased space within the announced inventory. - The address inventory is heavily subdivided into /19 and /20 blocks, primarily in the 154.0.0.0/8 and 206.0.0.0/8 ranges, consistent with a large-scale internal corporate or cloud estate.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Interconnection
Peering at a glance
Internet exchanges
Recorded at 5 exchanges in 4 countries, largest first.
| Exchange | Location | Their address |
|---|---|---|
| Equinix Internet Exchange Singapore | Singapore, Singapore | 27.111.230.151 |
| BroadBand Internet eXchange Tokyo | Tokyo, Japan | 101.203.90.57 |
| Hong Kong Internet Exchange | Hong Kong, China | 123.255.90.173 |
| Singapore Internet Exchange | Singapore, Singapore | 103.16.103.9 |
| Taipei Internet Exchange (TPIX) | Taipei, Taiwan | 203.163.222.184 |
Transit providers
26 upstream, 13 downstream and 53 adjacent networks observed; most-used upstreams first.
| AS | Network | Paths seen |
|---|---|---|
| AS3356 | Level 3 Parent, LLC | 10,134 |
| AS7473 | Singapore Telecommunications Ltd | 6,106 |
| AS4637 | Telstra Global | 4,041 |
| AS6939 | Hurricane Electric LLC | 3,436 |
| AS17676 | SoftBank Corp. | 3,026 |
| AS3491 | PCCW Global (HK) Ltd. | 2,851 |
| AS17408 | AboveNet Communications Taiwan | 1,080 |
| AS4635 | Hong Kong Internet Exchange--Route Server 1 | 786 |
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-11-15, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 155 prefixes · 286K addresses IPv6 17 prefixes
| Country | Name | Prefixes |
|---|---|---|
| US | United States of America | 172 |
Registry
Allocation record
- Registry
- ARIN
- Handle
AS18186- Registry name
- NEBULA-GLOBAL
- Registrant
- Nebula Global LLC
- Abuse contact
- abuse@nebulaglobal.net
- Registered
- 2024-09-25
- Last changed
- 2026-06-11
- Allocation
- assigned
Declared
PeeringDB profile
- Name
- Nebula Global LLC
- Network type
- Network Services
- Scope
- Not Disclosed
- Traffic ratio
- Mostly Inbound
- Peering policy
- Open
- IRR as-set
AS-18186- Website
- https://as18186.nebulaglobal.com/
PeeringDB records are maintained by the network operator and are not independently verified. Treat them as a statement of intent rather than of fact. For the observed and recorded view, see peering, which lists the exchanges Packet Clearing House has a port on file for.
Routing security
RPKI and IRR
- RPKI
- 4% valid · 29 valid, 563 with no ROA 60 RPKI-invalid
- ROAs
- 60 authorising AS18186
- ASPA
- no ASPA record
- IRR
- 90% registered · 590 of 652 announcements 3 other origin
- Route objects
- 1,542 naming AS18186
Reputation
Classification and threat
Hosting Datacenter or cloud provider. Addresses are servers, not people.
Spamhaus DROP
Not on ASN-DROP The network as a whole is not listed.
1 DROP match Announced space overlapping the DROP prefix list.
| Announced | DROP entry | Record |
|---|---|---|
| 103.179.148.0/23 | 103.179.148.0/24 | SBL639191 |
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 454 networks and 1,849 prefixes, as published 2026-11-14. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
4 IC3 indicators addresses in this network appear in FBI IC3 cybersecurity advisories.
| Prefix | Advisory | Published |
|---|---|---|
154.38.104.144 | China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems | 2026-08-26 |
154.38.105.109 | China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems | 2026-08-26 |
154.38.105.11 | China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems | 2026-08-26 |
154.38.105.39 | China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems | 2026-08-26 |
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere