---
VIRBL:
  domain: virbl.dnsbl.bit.nl
  type: ip
  "0": OK
  127.0.0.2: malware or phishing email sources
SPAMHAUS:
  127.0.0.3: Illegal 3rd party exploits, including proxies, worms and trojan exploits
  127.0.0.4: Illegal 3rd party exploits, including proxies, worms and trojan exploits
  127.0.0.5: Illegal 3rd party exploits, including proxies, worms and trojan exploits
  127.0.0.6: Illegal 3rd party exploits, including proxies, worms and trojan exploits
  domain: zen.spamhaus.org
  type: ip
  "0": OK
  127.0.0.2: Direct UBE sources, verified spam services and ROKSO spammers
  127.0.0.10: ISP Maintained Policy Block List
  127.0.0.11: SpamHaus Maintained Policy Block List
URIBL:
  127.0.0.4: Address found in UBE/UCE, and probably honour opt-out requests
  domain: multi.uribl.com
  type: domain
  "0": OK
  127.0.0.8: Address not listed on black and are either very young (domain age via whois), or use whois privacy features to protect their identity.
  127.0.0.2: Address belonging to and used by spammers
SURBL:
  127.0.0.64: jwSpamSpy + Prolocation data source
  127.0.0.32: AbuseButler spamvertised sites
  127.0.0.4: sa-blacklist and other sources
  domain: multi.surbl.org
  type: domain
  "0": OK
  127.0.0.8: Phishing data source
  127.0.0.16: Outblaze spamvertised sites
  127.0.0.2: SpamCop message-body URI domains
NJABL:
  127.0.0.3: Dial-up/dynamic IP range
  127.0.0.4: Spam source
  127.0.0.5: Multi-stage open relays
  domain: dnsbl.njabl.org
  type: ip
  "0": OK
  127.0.0.8: Insecure CGI web server, possible spam source
  127.0.0.9: Open proxy servers
  127.0.0.2: Open relay
SPAMCOP:
  domain: bl.spamcop.net
  type: ip
  "0": OK
  127.0.0.2: Spam source
SORBS:
  127.0.0.3: Open SOCKS Proxy Servers
  127.0.0.10: Dial Up Users
  127.0.0.11: domain names where the A or MX records point to bad address space
  127.0.0.4: Misc Open Proxy Servers
  127.0.0.12: domain names where the owners have indicated no mail should ever be sent with these domains
  127.0.0.5: Open SMTP Relays
  127.0.0.6: Spam Sources
  domain: dnsbl.sorbs.net
  127.0.0.7: web (WWW) server which have spammer abused vulnerabilities (e.g. FormMail scripts)
  type: ip
  "0": OK
  127.0.0.8: hosts demanding they are never tested by SORBS
  127.0.0.9: Botnet/DDoS Zombies
  127.0.0.2: Open HTTP Proxy Servers
DRONEBL:
  domain: dnsbl.dronebl.org
  type: ip
  "0": OK
  127.0.0.1: Host listed in DroneBL
  127.0.0.2: Sample
  127.0.0.3: IRC Drone
  127.0.0.5: Bottler
  127.0.0.6: Unknown spambot or drone
  127.0.0.7: DDOS Drone
  127.0.0.8: SOCKS Proxy
  127.0.0.9: HTTP Proxy
  127.0.0.10: ProxyChain
  127.0.0.13: Brute force attackers
  127.0.0.14: Open Wingate Proxy
  127.0.0.15: Compromised router / gateway
  127.0.0.17: Automatically determined botnet IPs (experimental)
  127.0.0.255: Unknown
BARRACUDA:
  domain: b.barracudacentral.org
  type: ip
  "0": OK
  127.0.0.2: Listed
DRONE_ABUSE_CH:
  domain: drone.abuse.ch
  type: ip
  "0": OK
  127.0.0.2: Spam related FastFlux Bot
  127.0.0.3: Malware related FastFlux Bot
  127.0.0.4: Phish related FastFlux Bot
  127.0.0.5: Scam related FastFlux Bot
HTTPBL_ABUSE_CH:
  domain: httpbl.abuse.ch
  type: ip
  "0": OK
  127.0.0.2: Hacking activities
  127.0.0.3: Hijacked server automated scanning drone
  127.0.0.4: Referrer spam
SPAM_ABUSE_CH:
  domain: spam.abuse.ch
  type: ip
  0: OK
  127.0.0.1: Sends spam to spamtrap
MAILSHELL:
  domain: dnsbl.mailshell.net
  type: ip
  0: OK
  127.0.0.2: Blacklisted
  127.0.0.188: Blacklisted
  127.0.0.190: Blacklisted
CBL:
  domain: cbl.abuseat.org
  type: ip
  0: OK
  127.0.0.2: Blacklisted
FIVETENSG:
  domain: blackholes.five-ten-sg.com
  type: ip
  127.0.0.2: Spam
  127.0.0.3: Dialup
  127.0.0.4: Bulk
  127.0.0.5: Multistage
  127.0.0.6: Singlestage
  127.0.0.7: Spam-support
  127.0.0.8: Webform
  127.0.0.9: Misc
  127.0.0.10: klez
  127.0.0.11: tcpa
  127.0.0.12: free
  127.0.0.13: cr
INPS:
  domain: dnsbl.inps.de
  type: ip
  127.0.0.2: Blacklisted
MANITU:
  domain: ix.dnsbl.manitu.net
  type: ip
  127.0.0.2: Blacklisted
NOMOREFUN:
  domain: no-more-funn.moensted.dk
  type: ip
  127.0.0.2: Direct spam sources
  127.0.0.3: Dynamic IP or generic rDNS.
  127.0.0.4: Bulk mailers
  127.0.0.5: Multi stage open relay
  127.0.0.6: single stage open relay
  127.0.0.7: Ignoring complaints of spamming by customers
  127.0.0.8: Please update your formmail.pl script
  127.0.0.9: See http://moensted.dk/spam/no-more-funn/?addr=$
  127.0.0.10: Possible open proxy
  127.0.0.11: Please stop testing our servers
UCEPROTECT1:
  domain: dnsbl-1.uceprotect.net
  type: ip
  127.0.0.2: Blacklisted
UCEPROTECT2:
  domain: dnsbl-2.uceprotect.net
  type: ip
  127.0.0.2: Blacklisted
UCEPROTECT3:
  domain: dnsbl-3.uceprotect.net
  type: ip
  127.0.0.2: Blacklisted
WHITELIST:
  domain: ips.whitelisted.org
  type: ip
  127.0.0.2: Whitelisted
BACKSCATTERER:
  domain: ips.backscatterer.org
  type: ip
  127.0.0.2: Backscatterer
PROJECTHONEYPOT:
  domain: dnsbl.httpbl.org
  type: ip
  apikey: abcdefghijkl
  disabled: true
  decoder: phpot
TOREXITNODE:
  domain: torexit.dan.me.uk
  type: ip
  127.0.0.100: Tor Exit Node
SPFBL:
  domain: dnsbl.spfbl.net
  type: ip
  127.0.0.2: Ignoring complaints of spamming by customers.
  127.0.0.3: Dynamic IP, generic rDNS, no rDNS or invalid FCrDNS.