Oops, I should have replied to the original post.
The comment was meant to be an indicator of the usage, I wasn't worried about making it syntactically correct.
I personally like the hash of arrays approach, as it more closely mirrors the way I think about the problem: a key (IP address) that can have one or more aliases. However, as I noted in my original post, it is not the most efficient way to do things...just a bit easier to understand for a beginner IMHO.