diff --git a/ransomware_online.ipset b/ransomware_online.ipset
index 5267ba5ef1..831ec8cd10 100644
--- a/ransomware_online.ipset
+++ b/ransomware_online.ipset
@@ -20,15 +20,15 @@
 # Maintainer      : Abuse.ch
 # Maintainer URL  : https://ransomwaretracker.abuse.ch
 # List source URL : https://ransomwaretracker.abuse.ch/feeds/csv/
-# Source File Date: Mon Nov 21 12:24:11 UTC 2016
+# Source File Date: Mon Nov 21 12:32:30 UTC 2016
 #
 # Category        : malware
-# Version         : 471
+# Version         : 472
 #
-# This File Date  : Mon Nov 21 12:24:12 UTC 2016
+# This File Date  : Mon Nov 21 12:32:30 UTC 2016
 # Update Frequency: 5 mins 
 # Aggregation     : none
-# Entries         : 944 unique IPs
+# Entries         : 945 unique IPs
 #
 # Full list analysis, including geolocation map, history,
 # retention policy, overlaps with other lists, etc.
@@ -394,6 +394,7 @@
 103.224.182.206
 103.231.41.127
 103.233.193.83
+103.233.194.240
 103.247.8.249
 103.247.11.33
 103.247.98.219