# -------------------------------------------------------
# Address lists for RouterOS
# Powered by: Dennis J. "JD" Bungart / jd@route1.ph
# -------------------------------------------------------
# Address details courtesy of https://www.dshield.org/
# (c) DShield.org - SANS Internet Storm Center
# -------------------------------------------------------
# This list summarizes the top 20 attacking class C (/24)
# subnets over the last THREE DAYS. The number of 'attacks'
# indicates the number of targets reporting scans from this
# subnet
# -------------------------------------------------------
# Generated on: Sun Nov  2 15:00:00 UTC 2025
# Format: MikroTik RouterOS script
# Usage: import dshield.rsc
# Source: https://lists.mikrotik.help
# -------------------------------------------------------
/ip firewall address-list
add list=blacklist address=217.154.8.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=45.142.154.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=195.184.76.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=216.180.246.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=193.163.125.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=91.196.152.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=64.62.197.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=199.45.154.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=185.224.128.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=167.94.138.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=204.76.203.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=65.49.1.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=93.152.230.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=205.210.31.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=64.62.156.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=198.235.24.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=147.185.132.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=167.94.145.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=207.90.244.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=79.124.49.0/24 timeout="1w 00:00:00" comment=DShield