What we know
A bash script for CentOS that combines Apache, Cloudflare, and a CMS (mainly WordPress) to detect malicious requests in server logs and temporarily block the attacker's real IP via the Cloudflare API.
Evidence limits
The described behavior comes solely from the project's documentation and has not been independently verified.
Sources and provenance
- teakolik/honeytea repository
repository-documentation · 2026-10-04
Reviewed: 2026-10-04. This record may change when new evidence is found.