Where to place Nginx IP blacklist config file?

I would recommend to place your blacklist in iptables :) iptables -A INPUT -s 58.218.199.250 -j DROP That way you dont spend resources processing requests from unwanted ip addresses.

Looking at your log, it IS blocking the traffic, there is a 403 header - ie. Access denied.