Proactive application of the bots.honeypot.es fix (2026-08-22) before
attacks.db hits the same unbounded-growth crisis: batched prune using
the indexed received_at column (not id, which forces a full scan),
daily counts preserved via daily_summary, geo-enrichment off by default
since this jail has zero outbound internet access.
Malin
