diff --git a/ransomware_online.ipset b/ransomware_online.ipset
index 15edec8c90..92719a4827 100644
--- a/ransomware_online.ipset
+++ b/ransomware_online.ipset
@@ -20,15 +20,15 @@
 # Maintainer      : Abuse.ch
 # Maintainer URL  : https://ransomwaretracker.abuse.ch
 # List source URL : https://ransomwaretracker.abuse.ch/feeds/csv/
-# Source File Date: Sun Nov 20 13:40:12 UTC 2016
+# Source File Date: Sun Nov 20 13:48:15 UTC 2016
 #
 # Category        : malware
-# Version         : 427
+# Version         : 428
 #
-# This File Date  : Sun Nov 20 13:40:12 UTC 2016
+# This File Date  : Sun Nov 20 13:48:15 UTC 2016
 # Update Frequency: 5 mins 
 # Aggregation     : none
-# Entries         : 951 unique IPs
+# Entries         : 950 unique IPs
 #
 # Full list analysis, including geolocation map, history,
 # retention policy, overlaps with other lists, etc.
@@ -52,7 +52,6 @@
 14.102.148.15
 23.89.204.47
 23.89.204.100
-23.94.62.200
 23.94.156.24
 23.229.238.67
 23.238.17.34