IP Blocks Used by US Terrorist Surveillance Program

A Cryptome DVD is offered by Cryptome. Donate $25 for a DVD of the Cryptome 10+-years archives of 39,000 files from June 1996 to December 2006 (~4.1 GB). Click Paypal or mail check/MO made out to John Young, 251 West 89th Street, New York, NY 10024. Archives include all files of cryptome.org, cryptome2.org, jya.com, cartome.org, eyeball-series.org and iraq-kill-maim.org. Cryptome offers with the Cryptome DVD an INSCOM DVD of about 18,000 pages of counter-intelligence dossiers declassified by the US Army Information and Security Command, dating from 1945 to 1985. No additional contribution required -- $25 for both. The DVDs will be sent anywhere worldwide without extra cost.

8 February 2007. A sends:

Another thing to note about the program is that access attempts are usually done through Microsoft service ports 1025-1030. Microsoft OS's allow remote access via these specific ports.

A2 sends a CIDR notation of the list.

6 February 2007

A sends:

Partial List of IP Blocks Used by US "Terrorist Surveillance Program"

The following partial list of IP blocks are routinely used by the US government entities (supported by private contractors) to gain access to, to monitor, and in some cases, to destroy IT networks. Such activity is related to the US “Terrorist Surveillance Program.” Most of the registrants of the blocks listed below are not aware of these activities. Concerned network admins should examine traffic logs closely. A correlation of traffic from several of these IP blocks likely indicates that a network is under surveillance or has had access attempted by the US intelligence community and affiliated entities.

83.27.0.0 - 83.27.255.255



170.86.0.0 - 170.86.255.255



62.212.234.128 - 62.212.234.255



81.57.102.0 - 81.57.103.255



201.5.0.0 - 201.5.255.255



213.151.160.0 - 213.151.191.255



70.83.15.0 - 70.83.15.255



166.128.0.0 - 166.255.255.255



60.64.0.0 - 60.159.255.255



142.191.0.0 - 142.191.255.255



83.65.121.32 - 83.65.121.39



12.108.2.0 - 12.108.3.255



65.128.0.0 - 65.159.255.255



24.158.208.0 - 24.158.223.255



86.97.64.0 - 86.97.95.255



201.239.128.0 - 201.239.255.255



68.36.0.0 - 68.36.255.255



70.44.0.0 - 70.44.255.255



64.231.200.0 - 64.231.203.255



189.128.0.0 - 189.255.255.255



216.155.192.0 - 216.155.207.255



121.6.0.0 - 121.7.255.255



71.96.0.0 - 71.127.255.255



190.213.196.0 - 190.213.196.255



80.72.230.0 - 80.72.230.255



58.29.0.0 - 58.29.255.255



121.128.0.0 - 121.191.255.255



88.191.3.0 - 88.191.248.255



58.72.0.0 - 58.79.255.255



70.16.0.0 - 70.23.255.255



200.57.192.0 - 200.57.255.255



201.5.0.0 - 201.5.255.255



124.168.0.0 - 124.168.255.255



211.200.0.0 - 211.205.255.255



78.252.0.0 - 78.252.255.255



59.0.0.0 - 59.31.255.255



72.64.0.0 - 72.95.255.255



211.200.0.0 - 211.205.255.255



145.53.0.0 - 145.53.255.255



71.200.0.0 - 71.200.127.255



60.206.0.0 - 60.207.255.255



194.178.125.48 - 194.178.125.55



98.226.0.0 - 98.226.255.255



201.88.0.0 - 201.88.255.255



205.209.128.0 - 205.209.191.255



51.0.0.0 - 51.255.255.255



70.64.0.0 - 70.79.255.255



70.112.0.0 - 70.127.255.255



202.84.96.0 - 202.84.127.255



70.32.0.0 - 70.32.31.255



207.218.192.0 - 207.218.255.255



69.31.88.0 - 69.31.89.255



198.74.0.0 - 198.74.255.255



221.0.0.0 - 221.3.127.255



72.144.0.0 - 72.159.255.255



220.96.0.0 - 220.99.255.255



82.88.0.0 - 82.91.255.255



216.128.73.0 - 216.128.73.255

I've converted your list to CIDR notation, it's much more useful this way:

83.27.0.0/16



170.86.0.0/16



62.212.234.128/25



81.57.102.0/23



201.5.0.0/16



213.151.160.0/19



70.83.15.0/24



166.128.0.0/9



60.64.0.0/10



60.128.0.0/11



142.191.0.0/16



83.65.121.32/29



12.108.2.0/23



65.128.0.0/11



24.158.208.0/20



86.97.64.0/19



201.239.128.0/17



68.36.0.0/16



70.44.0.0/16



64.231.200.0/22



189.128.0.0/9



216.155.192.0/20



121.6.0.0/15



71.96.0.0/11



190.213.196.0/24



80.72.230.0/24



58.29.0.0/16



121.128.0.0/10



88.191.3.0/24



88.191.4.0/22



88.191.8.0/21



88.191.16.0/20



88.191.32.0/18



88.191.64.0/17



88.191.128.0/18



88.191.192.0/19



88.191.224.0/20



88.191.240.0/21



88.191.248.0/24



58.72.0.0/13



70.16.0.0/13



200.57.192.0/18



201.5.0.0/16



124.168.0.0/16



211.200.0.0/14



211.204.0.0/15



78.252.0.0/16



59.0.0.0/11



72.64.0.0/11



211.200.0.0/14



211.204.0.0/15



145.53.0.0/16



71.200.0.0/17



60.206.0.0/15



194.178.125.48/29



98.226.0.0/16



201.88.0.0/16



205.209.128.0/18



51.0.0.0/8



70.64.0.0/12



70.112.0.0/12



202.84.96.0/19



70.32.0.0/19



207.218.192.0/18



69.31.88.0/23



198.74.0.0/16



221.0.0.0/15



221.2.0.0/16



221.3.0.0/17



72.144.0.0/12



220.96.0.0/14



82.88.0.0/14



216.128.73.0/24