Bitwise Trie Method Checks Millions of Blacklisted IPs in Constant Time

API gateways and FinTech services routinely block malicious traffic using IP blacklists, but attackers often rotate across entire subnet ranges (CIDR blocks) rather than single static addresses. Traditional approaches like linear array scans require up to 50,000 operations per request, while expanding subnets into hash maps can exhaust server memory. A Bitwise Trie treats each IPv4 address as a 32-bit binary string, allowing subnet lookups by traversing at most 32 nodes regardless of blacklist size. Inserting a CIDR block involves walking only the network-prefix bits and marking the final node as blocked, so any incoming IP can be evaluated in O(32) constant time. This fixed-depth structure makes it practical to maintain and query blacklists containing millions of subnets without performance degradation.