{"id":25936090,"url":"https://github.com/jojiiofficial/triplink","last_synced_at":"2026-05-12T14:02:09.290Z","repository":{"id":102287592,"uuid":"217312050","full_name":"JojiiOfficial/Triplink","owner":"JojiiOfficial","description":"Listens for incoming port scans and reports the IPs to the ScanBanServer","archived":false,"fork":false,"pushed_at":"2020-01-28T16:16:08.000Z","size":164,"stargazers_count":4,"open_issues_count":6,"forks_count":1,"subscribers_count":1,"default_branch":"master","last_synced_at":"2026-01-14T20:41:58.382Z","etag":null,"topics":["cronjob","filter","ipset","iptables","security","security-automation","security-tools","triplink"],"latest_commit_sha":null,"homepage":"https://www.triplink.tech/","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/JojiiOfficial.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2019-10-24T13:55:34.000Z","updated_at":"2025-05-07T08:18:48.000Z","dependencies_parsed_at":null,"dependency_job_id":"c7ae0d98-bd28-474a-8462-33cddc6fcbd2","html_url":"https://github.com/JojiiOfficial/Triplink","commit_stats":null,"previous_names":["jojiiofficial/tripwire-reporter"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/JojiiOfficial/Triplink","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/JojiiOfficial%2FTriplink","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/JojiiOfficial%2FTriplink/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/JojiiOfficial%2FTriplink/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/JojiiOfficial%2FTriplink/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/JojiiOfficial","download_url":"https://codeload.github.com/JojiiOfficial/Triplink/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/JojiiOfficial%2FTriplink/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":32942147,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-12T09:19:52.626Z","status":"ssl_error","status_checked_at":"2026-05-12T09:17:33.438Z","response_time":102,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cronjob","filter","ipset","iptables","security","security-automation","security-tools","triplink"],"created_at":"2025-03-04T01:50:05.673Z","updated_at":"2026-05-12T14:02:09.250Z","avatar_url":"https://github.com/JojiiOfficial.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Triplink\nThis is a client which parses the logs from [Tripwire](https://github.com/JojiiOfficial/Tripwire) and uploads the IPs to a [server](https://github.com/JojiiOfficial/ScanBanServer). The logs from [Tripwire](https://github.com/JojiiOfficial/Tripwire) are in most cases webscanner who scan your machine(s) to make analytics or want to hack you. If you use this package, you can store scanner automatically in a database and block specific IP addresses. This allows you to sync those evil IPs between multiple devices/servers. In addition you can easily create/restore iptable and ipset backups.\n\n# Install\n### Run\n\n```\nchmod u+x ./update.sh\nsudo ./update.sh\n```\n\n### Or if you want to compile step by step\n```\ngo get\ngo build -o triplink\n```\nyou can move the binary into /usr/bin if you want:\n```\nsudo mv ./triplink /usr/bin/triplink\n```\n\n# Usage\n\n\u003cb\u003eCreate a config file\u003c/b\u003e to store the data. Every report/update will go to the given server.\u003cbr\u003e\n\u003cb\u003eNote:\u003c/b\u003e Don't use the same config file for multiple reporter instances\n```\n# triplink config create -t \u003ctoken\u003e -r \u003chttps://a-serv.er\u003e\n```\n\u003cbr\u003e\n\u003cb\u003e(Report)\u003c/b\u003e Parse the logfile and send the new scanner/spammer/hacker IPs to the server. Afterwards update the changed IPs from the server and block them (-u)\u003cbr\u003e\n\n```\n# triplink report -u\n```\n\n\u003cbr\u003e\n\u003cb\u003eFetch all IPs\u003c/b\u003e from the server and create automatically a set of IPs and blocks them. You can use this command once for getting all ips (existing IPs will be overwritten). If you run this command in eg. a cronjob you can remove the -a it will automatically update new IPs without fetiching everything. Afterwards it will backup and save the IPset\u003cbr\u003e\n\n```\n# triplink update -a\n```\n\n\u003cbr\u003e\n\u003cb\u003eBackup\u003c/b\u003e your \u003cb\u003eIPtables\u003c/b\u003e (-t) and IPset (-s) config. Without arguments it will only backup the IPset data. You can turn this off using -s=false\u003cbr\u003e\n\n```\n# triplink backup create -t -s\n```\n\n\u003cbr\u003e\n\u003cb\u003eRestore\u003c/b\u003e your \u003cb\u003eIPtables\u003c/b\u003e (-t) and IPset (-s) config. Without arguments it will only restore the IPset data. You can turn this off using -s=false. Use it for example in a cronjob with @reboot to restore the IPset data after a reboot, because otherwise they will be lost\u003cbr\u003e\n\n```\n# triplink backup restore -t -s\n```\n\n\u003cbr\u003e\n\u003cb\u003eInstall\u003c/b\u003e one or multiple cronjob(s) to automate reports, fetches, backups and restores\u003cbr\u003e\n\n```\n# triplink install\n```\n\u003cb\u003eNote:\u003c/b\u003e In some cron installations the $PATH var is not set to the path where iptables or ipset is installed in. If you get an error or the cronjob doesn't work you can either create a symbolic link in `/bin/iptables -\u003e 'your iptables binary'` and `/bin/ipset -\u003e 'your ipset binary` or you can set a custom $PATH in the crontab:\n```\nPATH=/usr/sbin:/bin:/sbin:/usr/bin      #Make sure ipset and iptables are in one of those folders\n```\nTo uninstall those automations use `crontab -e` and remove the line you don't want to have automated\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjojiiofficial%2Ftriplink","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fjojiiofficial%2Ftriplink","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjojiiofficial%2Ftriplink/lists"}