三档限流 (api 30r/s, admin 5r/s, login 1r/s) + UA / path 黑名单 (return 444) + 自动黑名单脚本 (5min cron, 24h TTL). 实测首跑封禁 222.128.55.233 (4xx=31) 和 120.55.61.72 (UA=zgrab).
12 lines
245 B
Plaintext
12 lines
245 B
Plaintext
# Auto-managed deny list (see /app/backend/nginx/block_ip.py)
|
|
# Format: deny 1.2.3.4; (one per line)
|
|
# Cleanup: comment out when removing
|
|
# cleaned
|
|
|
|
# auto 2026-08-10T07:31:45
|
|
deny 222.128.55.233;
|
|
|
|
# auto 2026-08-10T07:31:45
|
|
deny 120.55.61.72;
|
|
|