New, revised list of spyware-related IPs

From: sponge (yosponge@yahoo.com)
Date: 04/08/02 

From: yosponge@yahoo.com (sponge)
Date: Sun, 07 Apr 2002 22:33:50 GMT

 Think I've identified almost all of them by now. Feel free to
circulate this list, use it to block unwanted or malicious activity,
and/or incorporate it into anti-spyware software. However, please do
not delete any rules from it. If you think something should be added
or deleted, please email me at yosponge@yahoo.com. Thank you.!
 NOTE: Items preceeded by a single caret sign (>), are updates from
previous postings of this list. Please change or re-enter those rules.
Items preceeded by a plus sign (+) are NEW ITEMS.
Major revision: reclassified Netbroadcaster, etc. as Internetfuel and
replaced those filters with complete filters of Internetfuel. (Credit
to Steve for catching this and giving a good rundown.) Also added an
Alchemy Communications filter for "Other services", which are for
business users and those who want to block adult websites, which
happens to encompass Internetfuel.
Removed: GoHip 209.132.193.0, now covered by Internetfuel/Nettaxi
revision

Note on usage:
 This IP blocklist is intended to be used to block known spyware sites
and large ad services known or believed to be associated with spyware,
data mining and data warehousing companies. Most entries in the list
contain the following information:
 It is strongly recommended that you download and install a firewall
capable of blocking (filtering) IP addresses, like Tiny Personal
Firewall,
available at www.tinysoftware.com. Some firewalls (like the
super-popular,
free version of Zone Alarm) do not have the ability to block IPs. TPF
works well with other firewalls (it works beautifully with ZA.) The
following instructions explain step-by-step how to add the filters to
TPF.
Once you have done this once or twice you will be able to do it in
your
sleep. You may need to modify the instructions to suit other
firewalls.
Alexa will be used for the example below.

 Step 1: Start TPF.
 Step 2: On the tray at the bottom right of your screen,
right-click TPF's black icon.
 Step 3: Select Firewall Administration.
 Step 4: Click Advanced.
 Step 5: Highlight whatever rule is at the very top of the list by
clicking it.
 Step 6: Click the Insert button at the bottom.
 Step 7: Give the new item a name. Use the name of the spyware, if you
wish.
 Step 8: The protocol box should say Any. If it doesn't, click it and
select Any.
 Step 9: The direction box should say Both. Click it and select Both.
(If you are on a slow computer,
you can select "Outgoing".)
 Step 10: On the Remote Endpoint box, click and select Network/Mask.
 Step 11: In the Network Address box, enter from this list below the
number from
the left side of the list. In the case of Alexa, enter 209.247.41.0.
 Step 12: In the Network Mask box, enter the number from the middle
column,
which in this case is 255.255.255.0 .
 Step 13: The Rule Valid box should say Always. If not, select Always.
 Step 14: The Action button should be set to Deny.
 Step 15: You can check or uncheck the Log and Display alert box rules
according to your wishes.
 Step 16: Click Ok when done.

Congratulations! If you think this is time consuming, it's not. You'll
nail this in about half an hour. And you'll be well-protected! Add the
next item in the list, starting from step 6, above.

 If anybody has any updates, new IP addresses though to be used by
spyware, etc. please post them in alt.privacy.spyware.

Network Mask Spyware/Adware
name
>209.247.255.0 255.255.255.0 Alexa
64.152.66.0 255.255.255.0 Address.com/GTMI
206.142.53.0 255.255.255.0 BrilliantDigital
208.178.50.0 255.255.255.0 Comet Cursor
209.83.171.0 255.255.255.0 Comet Cursor
64.156.213.0 255.255.255.0 CashSurfers
194.131.254.0 255.255.255.0 Creative Labs
203.126.77.0 255.255.255.0 Creative Labs
65.112.114.0 255.255.255.0 Creative Labs
216.3.226.0 255.255.255.0 CuteFTP
209.73.225.0 255.255.255.0 Cydoor
63.72.76.0 255.255.255.0 eMachines
+64.157.1.0 255.255.255.0 ezCyberSearch
>212.117.137.0 255.255.255.0 EverAd
>64.95.66.0 255.255.255.0 Enliven
204.238.120.0 255.255.255.0 Gator
64.94.89.0 255.255.255.0 Gator
64.162.206.0 255.255.255.0 Gator
63.197.87.0 255.255.255.0 Gator
216.30.17.0 255.255.255.0 Gator
+64.243.64.0 255.255.255.0 Globalscape (CuteFTP, etc.)
64.61.30.0 255.255.255.0 Hotbar
63.167.250.0 255.255.255.0 Hotbar
212.117.152.0 255.255.255.0 Hotbar
+63.241.31.0 255.255.255.0 Infogate**
+209.132.242.0 255.255.255.0 Internetfuel
192.146.101.0 255.255.255.0 Lexmark
63.251.211.0 255.255.255.0 NewdotNet
>216.207.32.0 255.255.255.0 Onflow
208.184.172.0 255.255.255.0 Radiate/Aureate
216.37.13.0 255.255.255.0 Radiate/Aureate
204.71.154.0 255.255.255.0 RealNetworks
209.225.53.0 255.255.255.0 RealNetworks
66.35.210.0 255.255.255.0 RealNetworks
203.89.243.0 255.255.255.0 RedSheriff
203.166.18.0 255.255.255.0 RedSheriff
212.187.205.0 255.255.255.0 RedSheriff
128.242.244.0 255.255.255.0 Speedbit
207.153.253.0 255.255.255.0 Speedbit
209.132.218.0 255.255.255.0
Internetfuel/StreamMagic/Fordale/MediaCharger
209.132.205.0 255.255.255.0
Internetfuel/StreamMagic/Fordale/MediaCharger
207.246.124.0 255.255.255.0 Transponder
63.236.119.0 255.255.255.0 Web3000
**Not confirmed to be spyware

###NOTE: pay attention here. The Networks and Masks will be different
from here on out.###

216.237.0.0 255.255.0.0 Aadcom
63.197.20.136 255.255.255.248 Address.com
+199.232.145.0 255.255.224.0 AdTools, Inc.
209.225.4.64 255.255.255.224 Advertbar
204.74.64.0 255.255.192.0 Advertbar
*209.247.41.0 255.255.254.0 Alexa
+64.28.64.208 255.255.255.240 BargainBuddy (Net2phone)
+64.14.95.0 255.255.255.128 BargainBuddy (Net2phone)
+63.142.201.112 255.255.255.240 BargainBuddy (Net2phone)
64.70.38.160 255.255.255.224 BrilliantDigital
216.61.164.0 255.255.224.0 Creative Labs
198.95.32.0 255.255.224.0 Creative Labs
203.127.170.0 255.255.224.0 Creative Labs
63.237.152.0 255.255.254.0 C2 Media*
63.237.84.64 255.255.255.192 C2 Media*
63.203.128.160 255.255.255.248 Daliworld
208.215.64.0 255.255.64.0 DSSAgent (Broderbund/Mattel)
164.109.144.192 255.255.255.224 eMachines
*216.216.46.128 255.255.255.128 Enliven
208.185.211.64 255.255.255.240 Ezula
63.200.130.232 255.255.255.248 Ezula
64.95.64.0 255.255.254.0 Flycast
+216.176.203.0 255.255.255.224 FreeTree Media/eScorcher
208.184.198.0 255.255.255.128 Gator
216.141.76.128 255.255.255.248 Gator
209.132.220.0 255.255.255.128 GoHip
209.132.223.0 255.255.255.128 GoHip
64.21.61.192 255.255.255.192 Guidescope
209.249.105.16 255.255.255.252 Guidescope
64.95.112.64 255.255.255.240 Kettera (Address.com)
212.100.230.160 255.255.255.248 Naviscope
209.27.248.0 255.255.248.0 NewdotNet
12.102.45.2 255.255.255.254 Netropa
209.164.21.74 255.255.255.254 Netropa
>216.34.94.0 255.255.255.240 QuickFlicks (Epipo) (changed mask, moved from the list above)
134.122.0.0 255.255.0.0 Phoenixnet
216.33.228.180 255.255.255.254 Phoenixnet
207.188.0.0 255.255.224.0 RealNetworks
>208.147.88.0 255.255.240.0 RealNetworks (changed mask)
>205.219.198.0 255.255.254.0 RealNetworks (changed mask, moved from the list above)
216.167.8.0 255.255.255.240 Speedbit
216.167.51.184 255.255.255.248 Speedbit
216.167.25.146 255.255.255.252 Speedbit
216.167.113.144 255.255.255.240 Speedbit
194.90.14.0 255.255.255.128 Speedbit
209.207.198.160 255.255.255.240 Speedbit
209.132.192.0 255.255.192.0
StreamMagic/Fordale/MediaCharger
+216.130.214.64 255.255.255.240
StreamMagic/Fordale/MediaCharger
208.185.86.64 255.255.255.224 Viewpoint
63.115.87.192 255.255.255.192 Viewpoint
216.173.63.128 255.255.255.240 Viewpoint
65.200.139.0 255.255.255.224 Viewpoint
>66.36.0.0 255.255.252.0 VR World Technologies**
>66.36.4.0 255.255.255.0 VR World Technologies**
209.71.218.64 255.255.255.224 WebHancer
216.221.200.192 255.255.255.224 WebHancer
*Partially duplicated on "Other Sites list" below.
**dlder trojan/2001-007.com, various gambling-related sites. This is
used by both spyware/trojans, and web-based ads.

###NOTE: below are single IP addresses. Instead of selecting
Network/Mask (as you would have in step 10, above) select Single
IP.###

Single IPs Spyware/Adware name
166.88.8.48 Address.com
209.178.57.143 BrilliantDigital
64.60.8.190 BrilliantDigital
63.196.54.245 BrilliantDigital
209.10.17.133 Cydoor
212.29.215.3 Cydoor
209.11.42.240 Cydoor
63.71.110.0 DSSAgent (Broderbund/Mattel)
199.171.54.0 DSSAgent (Broderbund/Mattel)
164.109.144.179 eMachines
164.109.144.181 eMachines
207.174.207.177 Expedioware
213.244.183.20 Extreme-DM
212.142.37.162 Extreme-DM
64.225.154.175 Ezula
205.188.250.25 ICQ/Mirabilis (ads.icq.com must be blocked with
DNSKong or HOSTS)
212.100.224.102 Naviscope
216.157.91.36 Naviscope
64.12.151.216 Netscape
207.200.82.138 Netscape
208.186.78.81 1110100011o1window.info
147.208.175.70 Onflow
192.151.53.114 Netropa/(Hewlett-Packard site)
12.99.231.36 Netropa
12.98.204.163 Netropa
209.164.21.84 Netropa
209.164.21.66 Netropa
128.242.199.42 Speedbit
128.242.204.122 Speedbit
128.242.213.138 Speedbit
208.229.231.83 Transponder
207.246.124.101 Transponder
>Note: The three IPs used by VR World Technologies should be deleted in favor of filtering the whole block, listed above.

*###NOTE: In order to fully block Alexa, create a rule different than
those above and in the example. Set Protocol to TCP and UDP, direction
to Outbound, and use a Remote Endpoint of 224.0.0.0. For Mask, use
224.0.0.0, and set this to Deny. This will filter Alexa while
retaining your ability to use multicast systems, like online radio.###

Below are some advertising services affiliated with spyware. Most of
these can be effectively blocked with DNSKong. However, feel free to
add them, too.

Network Mask Advertising service
name
204.248.36.0 255.255.255.0 Akamai***
216.200.14.0 255.255.255.0 Akamai***
209.185.188.0 255.255.255.0 Akamai***
64.124.157.0 255.255.255.0 Akamai***
192.232.16.0 255.255.255.0 Akamai***
4.17.143.0 255.255.255.0 Akamai***
12.47.217.0 255.255.255.0 Akamai***
216.32.65.0 255.255.255.0 Akamai***
208.184.29.0 255.255.255.0 DoubleClick
208.211.225.0 255.255.255.0 DoubleClick
205.138.3.0 255.255.255.0 DoubleClick
204.176.177.0 255.255.255.0 DoubleClick
206.65.183.0 255.255.255.0 DoubleClick
209.67.38.0 255.255.255.0 DoubleClick
+199.95.210.0 255.255.255.0 DoubleClick
63.80.0.0 255.255.255.0 24/7 Media

###NOTE: pay attention here. The Networks and Masks will be different
from here on out###

204.178.107.224 255.255.255.224 Akamai***
204.176.192.0 255.255.192.0 Akamai***
213.161.66.128 255.255.255.128 Akamai***
216.32.60.128 255.255.255.128 Akamai***
216.32.170.192 255.255.255.192 Akamai***
216.37.32.32 255.255.255.224 Akamai***
204.178.123.32 255.255.255.32 Akamai***
204.178.110.0 255.255.255.128 Akamai***
+24.200.251.0 255.255.255.192 Akamai***
64.157.224.0 255.255.252.0 Avantgo
>63.84.167.64 255.255.255.192 DoubleClick (changed mask)
>204.253.104.0 255.255.254.0 DoubleClick (consolidated two filters into one, moved onto this list)
>199.95.206.0 255.255.254.0 DoubleClick (consolidated two filters into one, moved onto this list)
>199.95.208.0 255.255.254.0 DoubleClick (consolidated two filters into one, moved onto this list)
209.225.31.128 255.255.255.128 24/7 Media
63.97.88.0 255.255.255.224 24/7 Media
209.225.31.192 255.255.255.192 24/7 Media
209.15.0.0 255.255.0.0 Utopiad/Mesia
216.241.32.0 255.255.224.0 Hypermal
209.132.97.160 255.255.255.248 Track-Star
209.132.99.128 255.255.255.192 Track-Star
***Akamai is best blocked using DNSKong.

###NOTE: below are single IP addresses. Instead of selecting
Network/Mask (as you would have in step 10, above) select Single
IP.###

64.246.10.188 AdRoar
216.12.215.30 AdRoar
216.40.201.16 AdRoar
216.40.213.21 AdRoar
216.200.199.0 bfast/hyperbanner

A few others recommended that you block:
224.0.0.0 to 255.255.255.254 (you may need to use your firewalls'
Network/Range function (if it has one).
10.0.0.0 Use a Mask of 255.0.0.0
172.16.0.0 Use a Mask of 255.240.0.0
192.0.0.0 Use a Mask of 255.255.0.0
169.254.0.0 Use a Mask of 255.255.0.0
207.46.0.0 (use a Mask of 255.255.0.0) Microsoft/Conxion
207.68.128.0 (use a Mask of 255.255.128.0) Microsoft/Conxion
206.204.0.0 (use a Mask of 255.255.0.0) Microsoft/Conxion

+Other services (mainly for corporate users and users with children;
blocks adult sites, sites often hosted by spam, etc):
65.89.40.0 255.255.252.0 Pulse Web Ventures
This is where C2Media/Lop.com run off. Consists mostly of porn sites
and other seedy services. If you want to disable access to these sites
as well as C2Media, do not use the C2Media filter above; use this one.
64.157.0.0 255.255.252.0 Neucom, Inc.
64.159.64.0 255.255.224.0 Neucom, Inc.
This is where ezCyberSearch runs off. Again, consists mostly of porn
sites and other seedy services. If you want to disable access to these
sites as well, do not use the ezCyberSearch.com filter above, use this
one.
64.38.192.0 255.255.192.0 CaveCreek
Numerous adult websites advertised by spam. Credit card billing
service, ccbill.com, very popular with spammers, whether they are
hosted by CaveCreek or with outside services. It is also recommended,
if you are an ISP, that you filter all traffic to and from this
service.
209.132.192.0 255.255.248.0 Whitehorn Ventures/Nettaxi
209.132.236.0 255.255.255.192 Spice TV
209.132.254.0 255.255.254.0 Vivid Video
209.132.225.0 255.255.254.0 Nettaxi
Numerous adult websites, also numerous spyware-related services,
namely Internetfuel/Netbroadcaster/Fordale Ltd./StreamMagic. Or, if
you can stand to lose contact with some of the legitimate vendors,
just block 209.132.192.0 and use a mask of 255.255.192.0. You might be
able to delete rules in the previous lists which block traffic to and
from 209.132.x.x.
202.181.197.0 255.255.255.0 Everex
One of the largest spam-redirection services on the Internet, this
service "redirects" browsers, usually to spammed or adult sites. Most
porn runs through 202.181.197.84. It is also recommended, if you are
an ISP, that you filter all traffic to and from this service.

Note for Address.com users:
 If Address.com is your ISP, you probably consented to allow them to
monitor your surfing activity, so you must abide by your
Terms-of-Service. If Address.com was installed for you, or without
your consent but you must use it, you may continue to use it as long
as you provide a rule in your firewall allowing 64.152.66.74 and
63.197.20.138. To do this, follow Steps 1-16 in the example, except in
Step 10 select "Single IP" and in Step 14, select Permit. It is
important that this rule be placed ABOVE the other rules for
Address.com.

Disclaimer: All the sites, IP ranges, associations, etc. are provided
to the best of my knowledge and are based on various traces and
linkings by registration information, company affiliations, media
reports, and other public resources. No guarantee as to the accuracy
of this information is assumed nor is any harm intended toward any
corporation(s) or individual(s) on, affected by (directly or
indirecly) by the use or misuse of this list. By reading or using this
information you agree to release the provider, poster, sender, or
author or contributors to this list harmless, as well as any service
provider used in the transmision of this list. This information is not
intended to be used to violate the Terms of Service or End User
Licensing Agreement between you and any vendor, website, or spyware,
adware, or advertising manufacturer or their affiliates. Please post
corrections, updates, or commentary to comp.security.firewalls or
alt.privacy.spyware.
Spyware is defined as any program, applet, ActiveX control, Browser
Helper Object, or website which transmits such to a client's computer,
or a service which meets one or more of the following criteria:
1. Is installed without a user's explicit knowledge or explicit
consent.
2. Uploads information without a user's explicit knowledge or explicit
consent.
3. Uploads, associates, or appears to or is readily capable of
associating uploaded information with personally-identifiable
information, such as registration information or data collected from
third-party sources, without the user's explicit knowledge or explicit
consent.
 Any software vendor or website on this list may feel free to contact
the author at yosponge@yahoo.com
DNSKong blocklist: DNSKong itself is available from www.pyrenean.com.
The
companion program, eDexter, may be necessary, but this is one of the
most effective security measures in existence and its use is strongly
recommended.

---DNSKONG BLOCKLIST---
A few notes:
This is a blocklist for use with DNSKong and has been optimized for
speed. Simply cut and paste this into Windows Notepad, and save it in
C:\PROGRA~1\PYRENEAN\DNSKONG as NAMED.TXT. If you use any other
editing program, make sure you save it as an MS-DOS text file.
You may want to remove Microsoft, msft, Netscape, and AOL (but I
recommend you leave in ads.web.aol.com) to access these services. You
will be unable to access MSNBC because MSNBC tracks you using MSID and
a unique identifier unless you remove the item in the list below
called MSID, which will allow all Microsoft and related sites to
assign you a unique identifier. Be warned: this identifier can track
you across sessions and will function even if you have cookies
disabled. It is
STRONGLY recommended that you not remove MSID or any of the other
filters
except those above, even if it means being unable to access these
sites.
For best results, follow the instructions provided. Put any DNS
servers (don't
worry, you'll find out what these are) from your Networks list into
DNSKong's
Proxy DNS list, which can be called up by right-clicking DNSKong's
program icon
and selecting Proxy DNS.
 Also, you may wish to remove the first few entries if you wish to use
those sites.

ads.icq.com
cf.icq.com
cb.icq.com
microsoft
activation
barnesandnoble
netflip
crl.verisign.com
ocsp.verisign.com
exitfuel
internetfuel
symantec
mega-direct-downloads
mp3mp4
linksponsor
datingbox
webshots
netelligence
yourspecialoffers
yimg
linktracker
allcybersearch
lop
launch
i1
a1
i1img
c4
cc.excite
imagefarm
atwola
krd.realcities
msid
bcentral
double-click
doubleclick
a.r.tv
akamai
akamaitech
akamaitechnologies
akamaize
advertising
sabela
247media
advertising
bannermall
x10
d4p
marketscore
msads
eimg
msid.msn.com
adserver
x10
windowsmedia
adcreative
divx
msid.msn.com
click.hotbot.com
engage
ads.iwon.com
pervasive
spearway
123banners
1handedsurfing
about.com
ad
ads
ad-up
ad.erektor
ad0
ad1
ad17
ad2
ad2-one
ad4ex
adbility
ad20
ad21
ad22
ad23
ad3
ad4
ad8
ad9
adatom
adbot
adbutler
adbureau
adcenter
adclix
adclub
adcodes.bla-bla
adcontent.gamespy
adcontroller.unicast
adcount
adcounter
adcreatives
adcycle
addb.looksmart
addme
adflight
adforce
adforms.cimedia
adfu.blockstackers
adhost
adhosts
adimage
adimages
adimg
adimgs
adinfo
adknowledge
adline
admaster
admaximize
admedia
admex
admonitor
adnet
adnetinternational
adpick
adpop
adserv
adserver
traffico
hyperbanner
flycast
flyswat
focalink
targetnet
fpp.adknowledge
free1.realtracker
free1.realtrackern
adpulse
adredirect
adremote
adrenalin
adrunner
ads
ads-01
ads-02
ads-03
ads-04
ads-05
ads-06
ads-07
ads-08
ads-real01
ads-real02
ads-real03
ads-real04
ads-real05
ads-real06
ads-real07
ads-real08
ads-real09
ads-real10
ads-real11
ads-real12
ads-real13
ads-real14
ads-real15
ads01
ads09
ads1
ads2
ads3
ads4
ads5
ads6
ads7
ads8
adsales
adserv
adserv1
adserv2
adserv3
adserv4
adserve
adserver
adserver1
adserver2
adservice
adshareware
adsmart
adsoftware
adsrv
adswap
adtech
adtegrity.spinbox
adtimes.nytimes
adtracking
adtraq
adultrevenueservice
advance.net
affiliate.aol
americansexonline
cimedia
imgis
netbanner
netcaptor
netdirect
netgravity
ak.snap
avenuea
avp2000
babylon-x
bach.datais
banner
banner-net
bannerad
bannerad.ipgnet
bannerdoctors
bannerexchange
bannerhealth
bannerhealth.cimedia
banneripgnet
bannermaster.geektech
bannerpower
banners
bannersolutions
bannerspace
bannerswap
bannersxchange
bannervip
bantam.ai.net
bbs.winmag
bcaudit01.lodo.exactis
bcs.zdnet
be.nedstat.net
bearsnbeanies
befree
beseen
beseen5.looksmart
beseenad.looksmart
beseenad1.looksmart
beseenad2.looksmart
beseenad3.looksmart
beseenadx.looksmart
beseenlooksmart
bess-proxy.feist
best-ads
best.netease
bestwarezsites
betaetsystems
bfast
befree
bigwebtools
bilbo.counted
binarybliss
bizad.nikkeibp
bizad.nikkeibp.co.jp
bizlink
bizlink.ru
biznikkeibp
biznikkeibp.co.jp
blink
bluemongoose
bluestreak
bnex
bookmarksync
BORIS.GLOMPH
bpath
brunnock.server
bsads.looksmart
bully.real
burstmedia
burstnet
businessfactory.delphi
buy.com
c-c-c-inc
califia.imaginemedia
cashcount
cassel-uk
caweb1.clickxchange
caweb2.clickxchange
cb.icq.com
cbird.sextracker
ccetsystems
ccran
usertracking
cgi.server.com
cgi1.entrypoint
cgi1.fxweb
cgi3.fxweb
cgicounter.puretec
cgicounter.puretec.de
chatetsystems
chillout.real
cimedia
cisales
cj
classic.adlink
classifieds1000
click.aptivia.net
go2net
clickagents
clickfinders
clickhere
clickheretoenter
clickhouse
clicks.about
clicks.babylon-x
clicktrade
clickxchange
clicz
code.netbreak
code.netbreak.au
code.superstats
coldfusion.websidestory
comet
cometsystems
cometzone
cometzoneetsystems
commission-junction
commonwealth.riddler
computingcentral
conducent
contentetsystems
contentzone
cookies.cmpnet
cornflakes.pathfinder
corp.driveway
count.yourmusic.cc
counted
counter.bizland
counter.mycomputer
counter.rambler
counter.rambler.ru
counterclone
counterclone2
coupe.de
creativ-ads
criticalmass
crux.songline
csdev01
csdev02etsystems
csprod01etsystems
csprod05etsystems
csprod06etsystems
csprod08etsystems
ct1.hypercount
cursorsetsystems
customad.cnn
customcnn
cyberbounty
cybereps
cybergorilla
czfarmetsystems
czfiles-1etsystems
czfiles-2etsystems
czfilesetsystems
dailyradar.ads.imaginemedia
coremetrics
inflow
datais
dc2.websidestory
delta-a1.tucows
devetsystems
dhcp152etsystems
digex-gwetsystems
digitalextc
digits.com
direct2.activeagent.at
directcoupons
directstuff.sparklist
disc.server
DNS-1.PROGNET
DNS.PROGNET
dns.spearmintrhino
DNS1.SCHOFFSTALL
dolphinsfootball
download.devetsystems
download.webtrends
download2etsystems
download3etsystems
downloadaccelerator
downloadetsystems
downlocometsystems
ds.audiobase
ds.cybereps
dynamic.isyndicate
e-shots.netzip
eads
easydns
edata.statmarket
editor99.buypin
efront
eh.click2net
elitecash
engageaudiencenet
engine.bottomdollar
enliven
enterprise.webtrendslive
epeople
erector
erektor
erie.smartage
escati.hypermart
escati.hypermart.net
eshop
eshopxml
etad.telegraph.co.uk
ettelegraph.co.uk
eu-adcenter
eads
eur.rd.yahoo
exchange-it
exchangead
exitexchange
exodusetsystems
exons2dus
exstatic
ezgreen
fairfax.au
fastclick
fastclmedialick
fgc-gwetsystems
files2etsystems
filesetsystems
fiona.ai
fiona.ai.net
firetrends
firstname
flom.net
flonetwork
freebanners
freefind
freeservers
freestats
freewebsites
ftp.adknowledge
ftp.admex
futurecard
futuresite.register
gadgeteer.pdamart
galileoetsystems
gameadexchange
Garden.ngadcenter
Garden.ngadcenter.net
hitexchange
gizmo
go.freei.net
go4media
gohip
goldcrown.linkshare
gorefer
goto.com
goto.net
gozilla
gp.dejanews
grafix.xxxcounter
graphic.recommend-it
graphics1.sextracker
group-mail
gtp.dejanews
gumball-tracker
guysetsystems
gw.tor.datais
hale-boppetsystems
halleyetsystems
hallmark.linkshare
happy-fun.tripod.net
headlines.isyndicate
heliumetsystems
hitbox
hitboxenterprise
hitboxwireless
hitmodel.net
home.flash
home.flash.ne
home.t-online
click.online
home.vividvip
hot50.net
hotlinks
hotlinks.net
hotqueens
hserver.yep
humanclick
hydrogenetsystems
hyebiz.net
hypercount
hypernet
i33
iadnet
iadnet-cookieless
ia.spinbox
ia.spinbox.net
ic.activeagent
ic.activeagent.at
icache.getrelevant
iceberg.adhomeworld
ilife
image-catcher
image.accendo
image.click2net
image.eimg
image.excite
image.pathfinder
image.ugo
images.about
images.cybereps
images.freeshop
images.onhealth
images.paypal
images.v3
images.vantagenet
images2.nytimes
imagine-inc
imaginemedia
img.cmpnet
img.techweb
imgworks.adbureau
imgworks.adbureau.net
immerce
impartner.de
independentsolutions
infi
integral.com
invite.informative
iwin
japan.datais
getstats
jobkeys.ngadcenter
jobkeys.ngadcenter.net
jump.eudora
jump1.eudora
jupiteretsystems
jwtt3
kcookie.netscape
kepleretsystems
leader
lidan
likoetsystems
link4ads
link4link
linkbuddies
linkcorp
linkexchange
links.worldbannerexchange
linkshare
linksynergy
linktracker.tripod
liquidad.narrowcastmedia
liquidnarrowcastmedia
lists.directcoupons
listsetsystems
lithiumetsystems
liveadvert
livestat
livewebsite
localhost
loggerhead.cimedia
looksmart
lygo
macaddictads.snv.futurenet
marketing.cimedia
matchlogic
maximumcash
maximumpcads.imaginemedia
mccetsystems
mdchoice
media-system
media-system.de
media.fastclick.com
medial.fastclick.net
mediaodyssey
mediaplex
melvcon
members.sexroulette
mercury.rmuk
minervaetsystems
mkstats
mockupsetsystems
mojofarm.sjc.mediaplex
monitor.looksmart
mp3board
mp3today.net
msgboard.linkshare
msid
mtree
multimania
multimulti
myaffiliateprogram
name.phx.frontiernet
name.roc.frontiernet
nationalisp.org
nav3.itworld
nbc.adbureau
nedstat
nedstatbasic
nedstats
neonetsystems
neptuneetsystems
net-on.net
netads.hotwired
netadsrv.iworld
netmag.co
netmechanic2
netomia
netscapeads.broadcast
netseller1
netzapp.nu
newads.cmpnet
news.directcoupons
nextcard
ng.sympatico.ca
ng3.ads.warnerbros
ng3.ang.sympatico
ngad.quicken
ngad.quicken.ca
ngad1.quicken
ngadclient.hearme
ngadclient1.mpath
ngads.go
ngads.smartage
nic.co.il
niftybucks
nimby.targetnet
nl.nedstatbasic
nl.nedstatbasic.net
nl.nedstatpro
nl.nedstatpro.net
nmia
now2000.com
ns.exodus
ns.exodus.net
ns.netsol
ns.server
ns1.bankrate
ns1.clickxchange
ns1.sfj.pnap
ns1.tor1.targetnet
flonetwork
ns2.clickxchange
ns2.exodus
ns2.sfj.pnap
nsads.hotwired
ntdigitalriver
nvostore.netopia
nzads
Ogilvy.ngadcenter
oliver.adcenter
oneandonlynetwork
Opt-InEmail
orangesoda
orb.net
p.moreover
paisvirtual
partner.webtrends
partners.webtrends
paypal
adsoftware
aureate
conducent
maedge
gozilla
pennyweb
personal.webtrendslive
phase2.rename
phase2.rename.net
pic.geocities
ping.excite
plus.link4link
pluto.adcycle
pluto.beseen
pong.netcaptor
pornstarpassion
portdetective
PostMasterBannerNet
ppn.affinia
preferences
promotions.yahoo
pubs.mgn.net
pud.cpulse
qaetsystems
quasar.sitegauge
radiate
rd.ads.juno
rd.jersey.ads.juno
real
realads
realaudio
realmedia
realtracker
ngadcenter
redirect.click2net
ccbill
adlink
relcom
remarq
rename
bCentral
rg1
rg10
rg2
rg3
rg4
rg5
rg6
rg7
rg8
rg9
rmapup.real
rootsweb
rubicon.entertainment-network
sa.netzip
saganetsystems
saturnetsystems
savvis-gwetsystems
schweiz-chart
schweiz-chart.ch
seawood.org
securitysearch
server.com
server.snap
server2.as5000
service.bfast
servisco.net
sex
sexcount
sexhound
sexlist
sexru
sextracker
sh4sure-images.adbureau
sitemeter
siterank.hypermart
sitestat.nedstat
sitetracke
sitetracker
sj1.northsky
sma.punto.net
smartclick
smartclicks
solair.eunet
solair.eunet.yu
speedbit
spiderware
spin.spinbox
spinbox.freedom
spinbox1.filez
spms.hypernet
spylog
ss.mtree
starsads
stat.servisco
statmarket
stats
stats4all
stattrack
store1.yimg
supernet
superstats
swap.warezswap
sweepstakes.about
swift
swiftad
take5.real
targetshop
te.tor.datais
teknosurf
teknosurf2
teknosurf3
tenzero
terisiasetsystems
terminalcash
thecounter
theglobe
theglobeandmail
themanagement
theozone.tripod
thepostbox
thinknyc.eu-adcenter
thrifty-trader
tickerland
timesink
top.list.ru
topstat
topwebpage
tor.datais
track-star
trackads
track2you
track.homestead
track2.homestead
track4
tracker
tradedoubler
trafficco
traxinspace
treeloto
trickys
trix.net
tsms-ad.tsms
tsms-tsms
tu-darmstadt
tuite
tvad2net
u2.123go
u2.123go.net
UGO.eu-adcenter
UGO.eu-adcenter.net
uk-banners
uniquemedia
update.downloadaccelerator
upload.webtrends
uranusetsystems
usachoice
usachoice.net
utopiad
searchhound
mesia
v3e.to
valuead
valueclick
venusetsystems
ver.ccetsystems
versiontracker.spinbox.net
video.server
view.accendo
virtualave
visit.geocities
visit.theglobeandmail
VNU.eu-adcenter
VNU.eu-adcenter.net
vorlon.ferretsoft
voyager1etsystems
web1000
web.aol
web2.deja
web3000
web4.topchoice
web4friends
webads
webcast
webconnect
webjump
webprovider
websidestory
websitefinancing
websponsors
webtrends
webtrendslive
welcome.ultrasites
wexchange
whosbest
wiredcash
worldbannerexchange
worldbe
worldinternetgroup
wsmg.digex
www2.server.com
wwwetsystems
wwwmission-junction
xtra.co.nz
xxxcounter
yellownetetsystems
yep.com
yoda.cybereps
zdads.e-media
zirve100
regsoft
regnow
ufasoft
msft
netbroadcaster
fordale
cyber-gold
devgames
duolaimi
newaol
qksz
qksrv
clickbank
adroar
bde3d
brilliantdigital
aureatemedia
aureate-im
apsads
btrack
ivwbox
shoppingcursor
dclk
cuteftp
globalscape
redsheriff
vitabella
imrworldwide
blackstonedata
vx2
e-ren
extreme-dm
gator
eguard
bloyalty
contextpro
ezula
onsoftware
cms2
rds2
bns1
rgs1
site-stats
i-skin
iskin
gator
eguard
cydoor
kminet
globalpac
internettechcorp
wordplanet
mindseti
cydoor-server
brodcast
promo.crossdomain.com
creativ-ads
creative-ads
adserv.newcentury.net
ads.softbank.net
ads.ugo.com
ads.csi.com
gamespy
adrunner.mycomputer.com
computers
cnet.com/Ads
socialnet
sandpiper
postmasterdirect
adtegrity
bannerbank
bannerspace
theadstop
l90
aadcom
dol
seek99
questionmarket
imrworldwide
ebags
acegroup
acim
acme
activagent
activdirect2eagent
activeagent
adult10000
adultfriendfinder
alexa
alladvantage
alma.devetsystems
alma.qaetsystems
alotofmoney.net
altair.marketsite
amateurpics
antfarm-flycast
anyday
aphroditeetsystems
arc1.msn
arc2.msn
arc3.msn
arc4.msn
armstrongsystems.bizland
arttoday
asimovetsystems
associates.Opt-InEmail
atrieva
audiobase
audittrack
aureate
austria-chart
av
1000stars
123go
1cgi.hitbox
2jm
3link.net
50megs
7search
aaddzz
aakro
abe.au
accel1
eads
accrue.cimedia
imagemall
targetwords
viewpoint
wayads
webstat
webhancer
worldstats
ytrack
zipstats
msads
mediaexchange
httpwwwadserver
freeclickstats
fordaleltd
ads.web.aol.com
cashsurfers
peacekeeper
clicktilluwin
2001-007
softclick
creativelabs
creative
soundblaster
creaf
movieblaster
phoneblaster
globalscape
daliworld
dalilab
learningco
broderbund
broder
emachines
iwareinc
e4me
eone4me
e-machines
ejump
everad
startad
playj
softj
kazamba
kabanga
cmgi
hotbar
lexmark
northeasthomes
ultsearch
activation.netscape.com
new
idealabs
ratednews
1110100011o1window
onflow
paynet
netropa
paviliondownload
mediascape
phoenix.com
ptltd
phoenixtechnologies
180solutions
epipo
privlabel
downloadaccelerator
streammagic
streamloads
qstreams
streamloader
mediacharger
movienetworks
netbroadcaster
viewpoint
metastream
webhancer
speedenabled
lop
address
Targitmail
Sonar
EmailOffersOnDemand
gtmi
kettera
askforfree
ask4free
cybermonitor
targetwords
yourspecialoffers
ezcybersearch
smartpops
cgiserver
accesstracking
activeads
activeadv
activeagent
acustat
2clk
ad-flow
adlink
adcept
adclix
adclix1
adclix2
adclix3
adready
adreporting
adresponsenet
adshareware
ads-links
adtagger
adtech
adtegrity
adtrader
rdxrp
rdxrs
maplehollow
inmotiongolf
sephora
wurldmedia
creativeinspire
tooned
gunkyard
desktopplants
ikena
bluestreak
affiliatetarget
free6
punto
icorp
adcept
trafficmp
coinpromo

Some helpful tips for corporate users or people with children:
 There are a few simple steps a company (or a parent) can take in
order to prevent others from accessing unwanted websites or services.
Both parents and corporations struggle with the issue of their
children or employees surfing adult sites, or using file-sharing
programs.
 First, it should be understood that I do not condone employee
monitoring. The good news is: if you take some of these precautions,
that might obviate the need for that, and save employers and parents
some money and headaches, to boot.
 First, apply ALL the spyware filters listed above. Because most
spyware is just a dumb program, spyware can leak sensitive data,
whether it was designed to or not. Bear in mind that having a
spyware-infected computer does not mean a child or an employee was
doing unauthorized surfing: spyware is becoming so common, and there
are so many methods of infection, it's actually becoming difficult to
avoid.
 Second, use your firewall(s) to block all traffic to and from ports
1214, 6346, and 6699. These are used by popular file-sharing programs
(1214 is used by KaZaa and Morpheus, 6346 is used by Limewire, and
6699 is used by WinMx.) That will render these programs useless.
 This can cause some minor problems. Occasionally, it may prevent a
webpage from loading or an email from going through or being read.
When that happens, just retry it. You might need to close the window
in which you're working. The reason why this happens is because your
browser (and some email programs) automatically start accepting data
destined for port 1024 on your computer when you first connect to the
Internet. Each time you click a link or open an email, the port number
increments by one. This way, you can view multiple web pages at the
same time. However, eventually, if you click enough links or read
enough email, you're going to hit one of the blocked ports. No
problem. Just save your work and retry it.
 Third, consider also blocking all traffic to and from port 119. This
is the port used by Usenet (newsgroups). Although Usenet newsgroups
are an excellent method of getting help and sharing knowledge, some
Usenet services carry adult material. Worse, Usenet spammers
occasionally may package a trojan, virus, or spyware into a Usenet
message. Furthermore, since most ISPs carry adult material on Usenet
-- even those that serve business customers -- this will help prevent
such groups from being accessed on your time.
 Finally, as mentioned above, it's helpful to block known services
which host adult sites. Three major services were already listed above
in the "Other services" section. It is not practical to try and block
every single site individually, but many adult sevices tend to
congregate on the same hosting service, making blocking them slightly
easier. Furthermore, consider setting up your web browser to use a
free proxy called the Proxomitron. That program allows you to specify
sites to block using wildcards. You can, for example, add rules like
"*XXX" to block any website with "XXX" in it's name