Normalise IP addresses across backend

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

backend/app/services/blocklist_parser.py

@@ -8,7 +8,7 @@ from __future__ import annotations
 
 import structlog
 
-from app.utils.ip_utils import is_valid_ip, is_valid_network
+from app.utils.ip_utils import is_valid_ip, is_valid_network, normalise_ip
 
 log: structlog.stdlib.BoundLogger = structlog.get_logger()
 
@@ -65,7 +65,7 @@ class BlocklistParser:
 
             # Accept only individual IP addresses, skip CIDRs and malformed
             if is_valid_ip(stripped):
-                valid_ips.append(stripped)
+                valid_ips.append(normalise_ip(stripped))
             else:
                 skipped += 1
 
@@ -101,7 +101,8 @@ class BlocklistParser:
             if is_valid_ip(stripped) or is_valid_network(stripped):
                 valid += 1
                 if len(entries) < sample_lines:
-                    entries.append(stripped)
+                    # Normalise individual IPs; keep networks as-is
+                    entries.append(normalise_ip(stripped) if is_valid_ip(stripped) else stripped)
             else:
                 skipped += 1