devisberto/mail_trace_viewer repository overview

⁠mail_trace_viewer

A Python/Flask web app that analyzes email headers and displays:

• the SMTP path of messages,
• server geolocation,
• IP reputation with AbuseIPDB,
• an interactive logical map and geographic map.

Source code hosted on Github⁠ Distributed under GNU GPLv3⁠

⁠Requirements

• Docker
• Free API key from AbuseIPDB⁠

⁠Deploy with Docker

export ABUSEIPDB_API_KEY=your_api_key
docker run -d -p 8080:8080 --env ABUSEIPDB_API_KEY=$ABUSEIPDB_API_KEY devisberto/mail_trace_viewer:latest

⁠Access the app:

Open your browser at http://localhost:8080⁠

⁠Features

• Advanced parsing of the Received: field
• IPv4, IPv6, hostname support with DNS lookup
• AbuseIPDB API with colored reputation (green/red)
• Block logical map + Leaflet geographic map
• Export to JSON

⁠Docker

The Docker image:

• Uses oraclelinux:9-slim with verified digest
• Python 3.12
• Non-privileged user appuser
• Exposes port 8080
• No residual pip, setuptools, or build tools