# -------------------------------------------------------
# Address lists for RouterOS
# Powered by: Dennis J. "JD" Bungart / jd@route1.ph
# -------------------------------------------------------
# Address details courtesy of https://www.dshield.org/
# (c) DShield.org - SANS Internet Storm Center
# -------------------------------------------------------
# This list summarizes the top 20 attacking class C (/24)
# subnets over the last THREE DAYS. The number of 'attacks'
# indicates the number of targets reporting scans from this
# subnet
# -------------------------------------------------------
# Generated on: Fri Jan  2 01:00:00 UTC 2026
# Format: MikroTik RouterOS script
# Usage: import dshield.rsc
# Source: https://lists.mikrotik.help
# -------------------------------------------------------
/ip firewall address-list
add list=blacklist address=147.185.132.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=65.49.1.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=195.184.76.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=204.76.203.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=64.62.156.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=213.209.159.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=91.230.168.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=176.65.149.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=167.94.138.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=193.163.125.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=185.242.226.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=91.224.92.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=194.180.48.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=206.168.34.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=205.210.31.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=216.180.246.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=64.62.197.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=198.235.24.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=213.177.179.0/24 timeout="1w 00:00:00" comment=DShield
add list=blacklist address=91.231.89.0/24 timeout="1w 00:00:00" comment=DShield