diff --git a/ransomware_feed.ipset b/ransomware_feed.ipset
index bf7bb9d6b4..203ec1ff09 100644
--- a/ransomware_feed.ipset
+++ b/ransomware_feed.ipset
@@ -19,12 +19,12 @@
 # Maintainer      : Abuse.ch
 # Maintainer URL  : https://ransomwaretracker.abuse.ch
 # List source URL : https://ransomwaretracker.abuse.ch/feeds/csv/
-# Source File Date: Sun Nov 20 06:52:13 UTC 2016
+# Source File Date: Sun Nov 20 07:04:12 UTC 2016
 #
 # Category        : malware
-# Version         : 32351
+# Version         : 32352
 #
-# This File Date  : Sun Nov 20 06:52:13 UTC 2016
+# This File Date  : Sun Nov 20 07:04:13 UTC 2016
 # Update Frequency: 5 mins 
 # Aggregation     : none
 # Entries         : 4040 unique IPs
@@ -2200,6 +2200,7 @@
 122.114.90.174
 122.114.90.223
 122.114.98.32
+122.114.98.185
 122.114.99.125
 122.114.99.126
 122.114.105.129
@@ -2841,7 +2842,6 @@
 185.12.110.27
 185.13.227.157
 185.13.227.177
-185.13.227.216
 185.14.28.30
 185.14.29.188
 185.14.30.97