diff --git a/atlas_fastflux_7d.ipset b/atlas_fastflux_7d.ipset
index 56f7e78e2c..58ce33b6c5 100644
--- a/atlas_fastflux_7d.ipset
+++ b/atlas_fastflux_7d.ipset
@@ -19,15 +19,15 @@
 # Maintainer      : Arbor Networks
 # Maintainer URL  : https://atlas.arbor.net/
 # List source URL : https://atlas.arbor.net/summary/fastflux.csv
-# Source File Date: Sun Nov 20 06:39:51 UTC 2016
+# Source File Date: Mon Nov 21 00:51:53 UTC 2016
 #
 # Category        : attacks
-# Version         : 196
+# Version         : 197
 #
-# This File Date  : Sun Nov 20 08:32:03 UTC 2016
+# This File Date  : Mon Nov 21 06:52:03 UTC 2016
 # Update Frequency: 1 day 
 # Aggregation     : 7 days 
-# Entries         : 24 unique IPs
+# Entries         : 27 unique IPs
 #
 # Full list analysis, including geolocation map, history,
 # retention policy, overlaps with other lists, etc.
@@ -38,11 +38,13 @@
 # Generated by FireHOL's update-ipsets.sh
 # Processed with FireHOL's iprange
 #
+23.46.249.160
 23.64.63.59
 23.194.67.97
 52.216.0.186
 52.216.0.202
 52.216.1.42
+52.216.17.10
 52.216.17.18
 52.216.80.10
 52.216.80.18
@@ -59,6 +61,7 @@
 54.231.114.233
 54.231.120.17
 104.72.34.75
+104.95.61.235
 104.96.218.15
 104.102.61.194
 104.106.249.50