aiwaf 0.1.9.0.9__tar.gz → 0.1.9.1.1__tar.gz

{aiwaf-0.1.9.0.9 → aiwaf-0.1.9.1.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: aiwaf
-Version: 0.1.9.0.9
+Version: 0.1.9.1.1
 Summary: AI-powered Web Application Firewall
 Home-page: https://github.com/aayushgauba/aiwaf
 Author: Aayush Gauba

{aiwaf-0.1.9.0.9 → aiwaf-0.1.9.1.1}/aiwaf/__init__.py

@@ -1,6 +1,6 @@
 default_app_config = "aiwaf.apps.AiwafConfig"
 
-__version__ = "0.1.9.0.9"
+__version__ = "0.1.9.1.1"
 
 # Note: Middleware classes are available from aiwaf.middleware
 # Import them only when needed to avoid circular imports during Django app loading

{aiwaf-0.1.9.0.9 → aiwaf-0.1.9.1.1}/aiwaf/storage.py

@@ -116,6 +116,11 @@ class ModelBlacklistStore:
         """Remove IP from blacklist (alias for unblock_ip)"""
         ModelBlacklistStore.unblock_ip(ip)
 
+    @staticmethod
+    def add_ip(ip, reason="Automated block"):
+        """Add IP to blacklist (alias for block_ip)"""
+        ModelBlacklistStore.block_ip(ip, reason)
+
     @staticmethod
     def get_all_blocked_ips():
         """Get all blocked IPs"""
@@ -189,7 +194,7 @@ class ModelExemptionStore:
 
 class ModelKeywordStore:
     @staticmethod
-    def add_keyword(keyword):
+    def add_keyword(keyword, count=1):
         """Add a keyword to the dynamic keyword list"""
         _import_models()
         if DynamicKeyword is None:
@@ -197,11 +202,25 @@ class ModelKeywordStore:
         try:
             obj, created = DynamicKeyword.objects.get_or_create(keyword=keyword)
             if not created:
-                obj.count += 1
+                obj.count += count
+                obj.save()
+            else:
+                obj.count = count
                 obj.save()
         except Exception as e:
             print(f"Error adding keyword {keyword}: {e}")
 
+    @staticmethod
+    def remove_keyword(keyword):
+        """Remove a keyword from the dynamic keyword list"""
+        _import_models()
+        if DynamicKeyword is None:
+            return
+        try:
+            DynamicKeyword.objects.filter(keyword=keyword).delete()
+        except Exception as e:
+            print(f"Error removing keyword {keyword}: {e}")
+
     @staticmethod
     def get_top_keywords(n=10):
         """Get top N keywords by count"""

{aiwaf-0.1.9.0.9 → aiwaf-0.1.9.1.1}/aiwaf/trainer.py

@@ -15,6 +15,7 @@ from django.apps import apps
 from django.db.models import F
 from .utils import is_exempt_path
 from .storage import get_blacklist_store, get_exemption_store, get_keyword_store
+from .blacklist_manager import BlacklistManager
 
 # ─────────── Configuration ───────────
 LOG_PATH   = getattr(settings, 'AIWAF_ACCESS_LOG', None)
@@ -102,13 +103,12 @@ def _parse(line: str) -> dict | None:
 def train() -> None:
     remove_exempt_keywords()
     
-    # Remove any IPs in IPExemption from the blacklist using storage system
+    # Remove any IPs in IPExemption from the blacklist using BlacklistManager
     exemption_store = get_exemption_store()
-    blacklist_store = get_blacklist_store()
     
     exempted_ips = [entry['ip_address'] for entry in exemption_store.get_all()]
     for ip in exempted_ips:
-        blacklist_store.remove_ip(ip)
+        BlacklistManager.unblock(ip)
     
     raw_lines = _read_all_logs()
     if not raw_lines:
@@ -141,8 +141,7 @@ def train() -> None:
             
             # Don't block if majority of 404s are on login paths
             if count > login_404s:  # More non-login 404s than login 404s
-                blacklist_store = get_blacklist_store()
-                blacklist_store.add_ip(ip, f"Excessive 404s (≥6 non-login, {count}/{total_404s})")
+                BlacklistManager.block(ip, f"Excessive 404s (≥6 non-login, {count}/{total_404s})")
 
     feature_dicts = []
     for r in parsed:
@@ -239,7 +238,7 @@ def train() -> None:
                 continue
             
             # Block if it shows clear signs of malicious behavior
-            blacklist_store.add_ip(ip, f"AI anomaly + suspicious patterns (kw:{avg_kw_hits:.1f}, 404s:{max_404s}, burst:{avg_burst:.1f})")
+            BlacklistManager.block(ip, f"AI anomaly + suspicious patterns (kw:{avg_kw_hits:.1f}, 404s:{max_404s}, burst:{avg_burst:.1f})")
             blocked_count += 1
             print(f"   - {ip}: Blocked for suspicious behavior (kw:{avg_kw_hits:.1f}, 404s:{max_404s}, burst:{avg_burst:.1f})")
         

{aiwaf-0.1.9.0.9 → aiwaf-0.1.9.1.1}/aiwaf.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: aiwaf
-Version: 0.1.9.0.9
+Version: 0.1.9.1.1
 Summary: AI-powered Web Application Firewall
 Home-page: https://github.com/aayushgauba/aiwaf
 Author: Aayush Gauba

{aiwaf-0.1.9.0.9 → aiwaf-0.1.9.1.1}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "aiwaf"
-version = "0.1.9.0.9"
+version = "0.1.9.1.1"
 description = "AI-powered Web Application Firewall"
 readme = "README.md"
 requires-python = ">=3.8"

{aiwaf-0.1.9.0.9 → aiwaf-0.1.9.1.1}/setup.py

@@ -9,7 +9,7 @@ long_description = (HERE / "README.md").read_text(encoding="utf-8")
 
 setup(
     name="aiwaf",
-    version="0.1.9.0.9",
+    version="0.1.9.1.1",
     description="AI‑driven, self‑learning Web Application Firewall for Django",
     long_description=long_description,
     long_description_content_type="text/markdown",