diff --git a/external-blocklist-worker.sh b/external-blocklist-worker.sh
index 7847c44..6613a3e 100644
--- a/external-blocklist-worker.sh
+++ b/external-blocklist-worker.sh
@@ -501,8 +501,8 @@ parse_blocklist_ips() {
                 log "WARN" "Eintrag übersprungen (ungültige IPv6-Adresse oder IP:Port): $line"
             fi
 
-        elif [[ "$line" =~ ^[0-9] ]]; then
-            # ── IPv4 ──────────────────────────────────────────────────────────
+        elif [[ "$line" =~ ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+(/[0-9]+)?$ ]]; then
+            # ── IPv4 (nur Ziffern, Punkte und optionaler CIDR-Suffix) ────────
             [[ "$line" == "0.0.0.0"* ]] && continue
             if _is_valid_ipv4 "$line"; then
                 echo "$line"
diff --git a/external-whitelist-worker.sh b/external-whitelist-worker.sh
index 890fe3e..83734bf 100644
--- a/external-whitelist-worker.sh
+++ b/external-whitelist-worker.sh
@@ -218,8 +218,8 @@ parse_whitelist_entries() {
                 log "WARN" "Whitelist-Eintrag übersprungen (ungültige IPv6): $line"
             fi
 
-        elif [[ "$line" =~ ^[0-9] ]]; then
-            # IPv4
+        elif [[ "$line" =~ ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+(/[0-9]+)?$ ]]; then
+            # IPv4 (nur Ziffern, Punkte und optionaler CIDR-Suffix)
             [[ "$line" == "0.0.0.0"* ]] && continue
             if _is_valid_ipv4 "$line"; then
                 echo "$line"