ThreatVision is a Cyber Threat Intelligence (CTI) dashboard that visualizes global attacks in real-time.
Unlike static maps, this tool fetches live threat data from open-source security feeds, geolocates the attacker's IP address, and plots the attack vector on an interactive dark-mode 3D map.
- 🔴 Live Data: Pulls real-time SSH Brute Force attackers from
Blocklist.de. - 🗺️ Geolocation: Converts raw IPs into GPS coordinates using the
IP-APIservice. - ⚡ High Performance: Uses an asynchronous frontend loop to update the map without page reloads.
| Component | Tech Used | Description |
|---|---|---|
| Backend | Python (Flask) |
Fetches & filters threat feeds; serves JSON API. |
| Frontend | HTML5 / JS |
Renders the dashboard and polls the API. |
| Mapping | Leaflet.js |
Renders the interactive "Dark Matter" world map. |
| Intel Source | Blocklist.de |
Provides the raw list of malicious IPs. |
git clone [https://github.com/devnand-47/ThreatVision.git](https://github.com/devnand-47/ThreatVision.git)
cd ThreatVision