#954 更新扫描器 UA 黑名单加入 Infrawatch + InternetMeasurement (20260810-205514)

access.log 发现 Infrawatch 探测 /mcp /sse 端点,InternetMeasurement 探测 / 首页. 加入 UA 黑名单 return 444. 验证:两个 UA 均被 444,正常 Mozilla 浏览器 200.

nginx/aiflow.conf

@@ -28,7 +28,7 @@ server {
     if ($request_uri ~* "^/(phpmyadmin|\.env|\.git/|actuator|actuator/|\.well-known/security)") {
         return 444;
     }
-    if ($http_user_agent ~* "(zgrab|nmap|masscan|nikto|sqlmap|acunetix|nessus|wpscan|dirbuster|gobuster|ffuf|hydra|metasploit|MJ12bot|AhrefsBot|SemrushBot|DotBot|PetalBot|Aspera|HTTrack|Scrapy|libwww|Havij|TSWeb)") {
+    if ($http_user_agent ~* "(zgrab|nmap|masscan|nikto|sqlmap|acunetix|nessus|wpscan|dirbuster|gobuster|ffuf|hydra|metasploit|MJ12bot|AhrefsBot|SemrushBot|DotBot|PetalBot|Aspera|HTTrack|Scrapy|libwww|Havij|TSWeb|Infrawatch|InternetMeasurement)") {
         return 444;
     }
     if ($http_user_agent ~* "(^curl/|^wget/|^python-requests)") {
@@ -127,3 +127,4 @@ server {
 }
 
 
+