in reply to Re: Increment frequency of attempts based on IP and login details combination
in thread Increment frequency of attempts based on IP and login details combination

Depending on how is is going to be used, it may not be necessary to build deeply nested hashes, as a composite key can often render the same service and make things easier.

For example,

$HONEY{$ip}{$port}{$status}{$user_pass} +=1;
might be replaced by:
$HONEY{"$ip;$port;$status;$user_pass"} ++;
but it really depends on how it's gonna be used.