Autonomous system
AS18186 NEBULA-GLOBAL - Nebula Global LLC
Hosting DROP-listed space ARIN
Summary
Nebula Global
hosting business cloud streaming
NEBULA-GLOBAL is the AS handle for Nebula Global LLC, a network services provider.
What it's used for
- The address space carries infrastructure for cloud and streaming services, evidenced by registrant netnames such as
STARCLOUDGLOBAL-HKandSTARCLOUD-GLOBAL-CGNT-NET-12. - The AS announces 216,320 IPv4 addresses across 130 prefixes and 10 IPv6 prefixes, while maintaining 61 observed neighbours, indicating a role focused on hosting and business connectivity rather than pure transit.
Notable
- Registrants include
StarCloudGlobal-HK,STARCLOUD GLOBAL PTE. LTD., andNTT America, Inc.; VIPAR, showing a mix of corporate entities and leased space within the announced inventory. - The address inventory is heavily subdivided into /19 and /20 blocks, primarily in the 154.0.0.0/8 and 206.0.0.0/8 ranges, consistent with a large-scale internal corporate or cloud estate.
This description is AI-generated, best-effort context — not authoritative, and provided without any guarantee of accuracy. Source, and how to suggest an edit.
Interconnection
Peering at a glance
Internet exchanges
Recorded at 5 exchanges in 4 countries, largest first.
| Exchange | Location | Their address |
|---|---|---|
| Equinix Internet Exchange Singapore | Singapore, Singapore | 27.111.230.151 |
| BroadBand Internet eXchange Tokyo | Tokyo, Japan | 101.203.88.166 |
| Hong Kong Internet Exchange | Hong Kong, China | 123.255.90.173 |
| Singapore Internet Exchange | Singapore, Singapore | 103.16.103.9 |
| Taipei Internet Exchange (TPIX) | Taipei, Taiwan | 203.163.222.184 |
Transit providers
30 upstream, 13 downstream and 59 adjacent networks observed; most-used upstreams first.
Exchange presence is recorded rather than inferred: the directory collected by Packet Clearing House (https://www.pch.net/ixp/data) on 2026-11-10, licensed CC BY-NC-SA 3.0. Transit is inferred from observed BGP paths, never declared by either party.
Address space
Summary
IPv4 155 prefixes · 286K addresses IPv6 17 prefixes
| Country | Name | Prefixes |
|---|---|---|
| US | United States of America | 172 |
Registry
Allocation record
- Registry
- ARIN
- Handle
AS18186- Registry name
- NEBULA-GLOBAL
- Registrant
- Nebula Global LLC
- Abuse contact
- abuse@nebulaglobal.net
- Registered
- 2024-09-25
- Last changed
- 2026-06-11
- Allocation
- assigned
Routing security
RPKI and IRR
- RPKI
- 23% valid · 166 valid, 562 with no ROA 1 RPKI-invalid
- ROAs
- 65 authorising AS18186
- ASPA
- no ASPA record
- IRR
- 99.2% registered · 723 of 729 announcements 6 other origin
- Route objects
- 1,581 naming AS18186
Reputation
Classification and threat
Hosting Datacenter or cloud provider. Addresses are servers, not people.
Spamhaus DROP
Not on ASN-DROP The network as a whole is not listed.
1 DROP match Announced space overlapping the DROP prefix list.
| Announced | DROP entry | Record |
|---|---|---|
| 103.179.148.0/23 | 103.179.148.0/24 | SBL639191 |
Spamhaus DROP ("Don't Route Or Peer") lists space and networks run by, or hijacked for, spam and cybercrime operations: 454 networks and 1,847 prefixes, as published 2026-11-11. A short, high-confidence list, so a match is worth taking seriously, and absence from it says little on its own.
FBI IC3
4 IC3 indicators addresses in this network appear in FBI IC3 cybersecurity advisories.
| Prefix | Advisory | Published |
|---|---|---|
154.38.104.144 | China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems | 2026-08-26 |
154.38.105.109 | China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems | 2026-08-26 |
154.38.105.11 | China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems | 2026-08-26 |
154.38.105.39 | China-Linked Hacking Group QTFY Targets Military and Critical Infrastructure with Malicious Distributed Systems | 2026-08-26 |
IC3 threat data is alpha. Absence of an indicator is not evidence of good behaviour, only of absence from this one feed.
Elsewhere