abusei

NetFlare pulls malicious IPs from AbuseIPDB, resolves them to coordinates with MaxMind GeoLite2, and streams them to a React client that plots each hit on an interactive globe. Global attack trends come from the Cloudflare Radar API. Attacks are cached in SQLite and drip-fed over a WebSocket, so the globe stays live without hammering the upstream