add ip to hashmap

put suspected ip into hashmap.otherwise update the hashmap