# -------------------------------------------------------
# Address lists for RouterOS
# Powered by: Dennis J. "JD" Bungart / jd@route1.ph
# -------------------------------------------------------
# Address details courtesy of https://www.dshield.org/
# (c) DShield.org - SANS Internet Storm Center
# -------------------------------------------------------
# This list summarizes the top 20 attacking class C (/24)
# subnets over the last THREE DAYS. The number of 'attacks'
# indicates the number of targets reporting scans from this
# subnet
# -------------------------------------------------------
# Generated on: Tue Sep 29 06:00:00 UTC 2026
# Format: MikroTik RouterOS script
# Usage: import dshield.rsc
# Source: https://lists.mikrotik.help
# -------------------------------------------------------
/ip firewall address-list
add list=blacklist address=216.180.246.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=45.198.224.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=65.49.1.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=45.74.28.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=193.163.125.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=185.136.15.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=147.185.132.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=69.5.169.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=77.239.124.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=185.242.226.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=198.235.24.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=66.132.172.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=156.225.1.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=205.210.31.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=45.115.26.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=66.132.186.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=66.240.223.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=148.59.129.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=64.62.197.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=64.62.156.0/24 timeout="1w 00:00:00" comment=DShield