Looking here, dbl is great, zrd hasn’t kicked in but is potentially very useful. The spambots have been quiet recently but this is what I’ve been seeing:
admin@vm1:~$ /srv/.all-sites/utils/rblinfo
23 rbl services currently configured
14 show rejections (exim4 logs with 10 day history)
non-spamhaus.org services might only 'tag'
service sites rejections
--------------------------------------------------------
zen.dq.spamhaus.net 32 183
b.barracudacentral.org 20 91
dbl.dq.spamhaus.net 32 38
truncate.gbudb.net 20 33
bl.mailspike.net 20 28
hostkarma.junkemailfilter.com 19 21
all.s5h.net 13 21
bl.spamcop.net 19 6
multi.uribl.com 19 4
dyna.spamrats.com 5 4
all.spamrats.com 12 3
ubl.unsubscore.com 10 2
noptr.spamrats.com 5 2
dnsbl.dronebl.org 16 1
zrd.dq.spamhaus.net 32 0
all.bl.blocklist.de 17 0
rhsbl.sorbs.net 12 0
dnsbl.justspam.org 6 0
bl.nordspam.com 3 0
dbl.nordspam.com 3 0
dbl.spamhaus.org 1 0
dnsbl.sorbs.net 1 0
zen.spamhaus.org 1 0
TOTAL - 437
--------------------------------------------------------
spamassassin 32 10
clamav 32 41
--------------------------------------------------------
debug3 oldest: /var/log/clamav/clamav.log.12.gz
DEBUG999 first line datetime string, maybe: Mon Apr 27 04:49:49 2020
DEBUG3.1 Glory 1587959389
DEBUG5 90
clamav logs (oldest file last modified 84 days ago)
- Sanesecurity.Spam - 111
- Sanesecurity.Junk - 43
- Sanesecurity.Phishing - 21
- Heuristics.Phishing - 7
- Sanesecurity.Jurlbl - 6
- Sanesecurity.Foxhole - 3
- Sanesecurity.SpamImg - 3
- Porcupine.Junk - 2
- Porcupine.Phishing - 2
- PhishTank.Phishing - 1
- Sanesecurity.Scam - 1
TOTAL - 200
--------------------------------------------------------
v20200214 : ~0.21s
(By the way, that spamhaus negation isn’t just about misconfiguration – it prevents all mail from being rejected if they started returning a code for, say, ‘too many queries’.)