diff --git a/dshield_top_1000.ipset b/dshield_top_1000.ipset
index 73244eb87f..a35274994e 100644
--- a/dshield_top_1000.ipset
+++ b/dshield_top_1000.ipset
@@ -9,12 +9,12 @@
 # Maintainer      : DShield.org
 # Maintainer URL  : https://dshield.org/
 # List source URL : https://isc.sans.edu/api/sources/attacks/1000/
-# Source File Date: Mon Nov 21 10:08:04 UTC 2016
+# Source File Date: Mon Nov 21 12:16:04 UTC 2016
 #
 # Category        : attacks
-# Version         : 5247
+# Version         : 5248
 #
-# This File Date  : Mon Nov 21 10:08:04 UTC 2016
+# This File Date  : Mon Nov 21 12:16:04 UTC 2016
 # Update Frequency: 1 hour 
 # Aggregation     : none
 # Entries         : 881 unique IPs
@@ -477,6 +477,7 @@
 158.69.246.24
 158.130.6.191
 159.203.208.242
+159.203.210.58
 159.203.210.130
 159.203.213.87
 159.203.213.113
@@ -571,6 +572,7 @@
 180.97.106.161
 180.97.106.162
 180.97.215.67
+180.97.215.101
 180.97.215.160
 180.97.215.177
 180.97.220.17
@@ -634,7 +636,6 @@
 184.105.247.196
 184.105.247.199
 184.105.247.200
-184.105.247.202
 184.105.247.203
 184.105.247.204
 184.105.247.206
@@ -643,7 +644,6 @@
 184.105.247.210
 184.105.247.211
 184.105.247.212
-184.105.247.214
 184.105.247.215
 184.105.247.216
 184.105.247.218