What exactly is suspicious_hosts.txt ?

nc50lc

legendary

Activity: 2534

Merit: 6080

Self-proclaimed Genius

That looks like a part of the 'DNS Seed' that Core uses to "jump-start" the connection to the network.
The purpose must be to minimize the risk of new nodes connecting to those node instead of the proper ones, but that's quite a small list compared to an active node's own banlist.dat.

Quote from: BlackHatCoiner on April 20, 2020, 08:49:55 AM

Yes but what stops them? They can simply change ip.

As I've said above, your node have its own "banlist" and will automatically ban the IP of misbehaving peers for 24hrs (default) if it detected a malicious activity.

20kevin20

legendary

Activity: 1134

Merit: 1598

Well, even if a suspicious host changes their IP and tries to attack again, the most logical idea is that their new try of an attack gets rejected again and added to the file. Once the first attack gets blocked, no matter what other IP they switch to, the block will occur for the second, third (and so on) try too..

Someone with a more advanced technical knowledge about BTC could correct me if I'm wrong. I'm just going for the common sense.