Code alwayse resolve type to malicious

Reviewing your code , it seems to me that it always resolve type to {..., malicious=true}

I misunderstood the query and response here, I think any response is treated as "suspecious".
This raises another question, seeing the return table here https://www.projecthoneypot.org/httpbl_api.php
I think this code return suspicious for everybody known to projecthoneypot. Thant means any IP including search engines, are flaged as suspecious which is kinda wrong.
I don't understand your logic at all, frankly speaking,

node-projecthoneypot/projecthoneypot.js

Line 19 in addd6e4

if (bits[1] == '1') obj.types.push("Harvester");

you assume one visitor with daily visits is a search engine ! did you ever read the mapping table

Finally, the honeypot api already returns a threat score, why don't you just return that ?
See The third octet

With the logic of your code, your are screwing the logic of projecthoneypot 100%

[carlospolop]

Hi @bacloud14,

This is an old code I created for a different project.
Please, apart of just criticism others code, could you also indicate your suggestions? You are definitely disappointed with this code but you haven't suggest any change specifically.
Also, if you need any change fast for some reason, I would invite you to modify the code yourself and submit a push request.

Hi @carlospolop
Sorry for the tone. I'm just emphasizing the mapping of their logic.
something like https://gist.github.com/bacloud14/2737beeb0d5045a8c86c31e10fd8472d

[carlospolop]

Hi mate,

I'm sorry but I don't think I will have time to fix this code soon because I'm focused on other projects. I see that the code you shared is yours and looks good. Please, consider submitting a push request fixing this project with that code.