Ages ago, but this has been a consistent issue with blacklistd for me over the years, and I got caught by it again today.
As a punt, I added netmasks to all addresses, including single IP addresses (so, added /32 to those).
Problem gone. Every 1/* never I see in blacklistctl dump -na is...