it looks like the mistake was an omission in Phishing-Database#821, adding previous IP from Phishing-Database#828 back to lists

Author: g0d33p3rsec

IP-addr.cidr.in-addr.arpa

@@ -63,6 +63,7 @@
 32.194.13.130.43
 32.195.250.61.49
 32.195.41.244.156
+32.196.72.156.185
 32.197.44.252.47
 32.197.7.252.47
 32.198.72.153.43

IP-addr.cidr.list

@@ -23,6 +23,7 @@
 181.215.205.242/32
 184.174.97.59/32
 184.174.97.68/32
+185.156.72.196/32
 185.156.72.2/32
 185.156.72.8/32
 185.156.72.96/32

IP-addr.in-addr.arpa

@@ -63,6 +63,7 @@
 194.13.130.43
 195.250.61.49
 195.41.244.156
+196.72.156.185
 197.44.252.47
 197.7.252.47
 198.72.153.43

IP-addr.list

@@ -23,6 +23,7 @@
 181.215.205.242
 184.174.97.59
 184.174.97.68
+185.156.72.196
 185.156.72.2
 185.156.72.8
 185.156.72.96