Re: DOD prefixes and AS8003 / GRSCORP

[Siyuan Miao <aveline () misaka io>]

So this company (Global Resource Systems, LLC) was formed on 2020-10-13 and
ARIN assigned AS8003 to them even earlier than it.

Here's a simple timeline in case anyone want to have a check:

9/8/2020 GLOBAL RESOURCE SYSTEMS, LLC registered in Delaware
9/10/2020 Nameserver of grscorp.com was changed from AfterNIC (a website to
sell premium / expired domains) to UltraDNS
9/11/2020 GLOBAL RESOURCE SYSTEMS, LLC (FL) registered their organization
in ARIN
9/14/2020 GLOBAL RESOURCE SYSTEMS, LLC (FL) got AS8003 from ARIN
9/21/2020 MAINT-GRSL-AS8003 is registered in RADB
10/13/2020 GLOBAL RESOURCE SYSTEMS, LLC registered in Florida

Around 21/01/2021, AS8003 registered numerous route objects in RADB and
started announcing DOD space.
In addition to AS8003, they also added AS95 to their AS-set and registered
some objects under AS95.

Based on RIPEstats, Last seen of AS8003 before 2021 is around 2003.
And there's another GLOBAL RESOURCE SYSTEMS, LLC in FL which has been
inactive since 2013.


On Thu, Mar 11, 2021 at 10:31 PM Alain Hebert <ahebert () pubnix net> wrote:

>     I scratch it out to hiding in plain sight...
>
> -----
> Alain Hebert                                ahebert () pubnix net
> PubNIX Inc.
> 50 boul. St-Charles
> P.O. Box 26770     Beaconsfield, Quebec     H9W 6G7
> Tel: 514-990-5911  http://www.pubnix.net    Fax: 514-990-9443
>
> On 3/11/21 9:14 AM, Filip Hruska wrote:
>
> Contacted HE NOC earlier regarding these announcements, they are
> "legitimate".
>
> Filip
>
> On 11/03/2021 14:56, Javier Henderson wrote:
>
>
> On Mar 11, 2021, at 8:43 AM, Eric Dugas via NANOG <nanog () nanog org>
> <nanog () nanog org> wrote:
>
> I would be really curious to see the LOA presented to AS6939 to announce
> 54 million IPs out of government IP space and what type of verification was
> done because it doesn't seem legit at all.
>
> Did you try calling the number on the WHOIS for AS8003, or maybe HE’s NOC
> to follow up?
>
> -jav