Geohashing.site launches Better Banhammer tool
The gist
Blogger Dan Q implemented a honeypot ban setup on Geohashing.site using Caddy, Fail2Ban and nftables.
He says it fixes a flaw that lets attackers trick legitimate users into bans.
How it unfolded
- Oct 25, 2026BetterBanHammer, a Paper Minecraft plugin by YONN2222 that bans a player hit with a mace, was published on Hangar.
- Nov 9, 2026Terence Eden shared his PHP-powered honeypot technique for banning bots that disregard his robots.txt file.
- Nov 9, 2026Dan Q published a post on the potential for abuse of Eden's technique, noting an attacker who derives the ban URL can trick legitimate users into visiting it.
Key terms
- honeypot
- A decoy computer system or data set designed to attract, detect, and analyze unauthorized attackers.
- Caddy
- An extensible, cross-platform, open-source web server written in the Go programming language.
- Fail2Ban
- An intrusion prevention software framework written in Python that blocks brute-force attacks by banning offending IPs.
Source: Wikipedia