P1-2 nginx 限流 + 扫描器拦截 (20260810-153624)

三档限流 (api 30r/s, admin 5r/s, login 1r/s) + UA / path 黑名单 (return 444) + 自动黑名单脚本 (5min cron, 24h TTL). 实测首跑封禁 222.128.55.233 (4xx=31) 和 120.55.61.72 (UA=zgrab).

nginx/blocked_ips.conf

@@ -0,0 +1,11 @@
+# Auto-managed deny list (see /app/backend/nginx/block_ip.py)
+# Format: deny 1.2.3.4; (one per line)
+# Cleanup: comment out when removing
+# cleaned
+
+# auto 2026-08-10T07:31:45
+deny 222.128.55.233;
+
+# auto 2026-08-10T07:31:45
+deny 120.55.61.72;
+