As per:
http://www.spamhaus.org/news/article/713/
Return Codes Type Note
127.0.1.2 spam domain
127.0.1.3 spammed redirector / url shortener (Phased out on January 7th,
2015)
127.0.1.4 phish domain
127.0.1.5 malware domain
127.0.1.6 Botnet C&C domain
127.0.1.102 abused legit spam
127.0.1.103 abused legit redirector / url shortener
127.0.1.104 abused legit phish
127.0.1.105 abused legit malware
127.0.1.106 abused legit botnet C&C
127.0.1.255 IP queries prohibited!
Rules have been updated (SA Bug 7056 - 2014-06-17) to reflect this.
Please run sa-update to get the updated rules & scores.
Axb