In the handbook page on using firewalls with blacklistd:
the bottom example lists the blacklisted entries with
# pfctl -a blacklistd/22 -t port22 -T show
and then instructs the user to use the following to delete one of those entries using:
# pfctl -a blacklistd/22 -T delete 184.108.40.206/25
However the command fails because it is missing the "-t port22"
It should read
# pfctl -a blacklistd/22 -t port22 -T delete 220.127.116.11/25
I'm not sure where the Handbook sources reside to make what should otherwise be a fairly straightforward patch/diff.