feat: add WHOIS subnet querying and IP consolidation utility

- Implemented a new utility for querying WHOIS information and consolidating IP addresses by subnet.
- Added caching mechanism for WHOIS responses to improve performance.
- Introduced functions for loading and saving the WHOIS cache, querying subnets, and consolidating IPs based on a threshold.

feat: create Flask web UI for intrusion detection system

- Developed a Flask web application to manage the intrusion detection system.
- Implemented routes for scanning, reports, blocklist management, and firewall configuration.
- Added helper functions for reading files and handling requests.

feat: define routes for web UI

- Registered routes for various web pages and API endpoints in the Flask application.
- Implemented functionality for scanning, reporting, blocklist management, and firewall state retrieval.

feat: implement background scan runner for web UI

- Created a background scan runner to handle scan jobs in a separate thread.
- Managed an in-memory job store for tracking scan jobs and their statuses.
- Added persistence for scan jobs to maintain state across application restarts.

chore: update start script for Flask application

- Enhanced the PowerShell start script to check for the existence of the virtual environment.
- Added comments and structured the script for better readability and usability.

.env.example

@@ -51,6 +51,15 @@ WHOIS_TIMEOUT=3.0
 # Minimum number of same-subnet IPs before blocking the whole subnet.
 SUBNET_THRESHOLD=3
 
+# --- Report retention ------------------------------------------------------
+
+# Each subdirectory under /reports/ keeps at most REPORT_RETENTION_MAX_FILES
+# files, all newer than REPORT_RETENTION_DAYS days. Older timestamped reports
+# are pruned automatically after each consolidated scan. The blocklist files
+# in reports/app/data/ are always protected.
+REPORT_RETENTION_DAYS=30
+REPORT_RETENTION_MAX_FILES=10
+
 # --- Scan / flagging defaults ----------------------------------------------
 
 # Rows in the top-IP report tables.