написал я regex на строку
2016-10-12 21:58:19.806458 [WARNING] fuck_friendly_scanners.py: Attempt to scan by 213.202.233.54 UA 'sipcli/v1.8' on profile 'internal'' as call from administrator to 8810442037693525
failregex = ^.*by\s+<HOST>\s+.*$
[# of hits] date format
| [116] Year-Month-Day Hour:Minute:Second
`-
Lines: 116 lines, 0 ignored, 101 matched, 15 missed
188.165.201.67 Wed Oct 12 21:57:09 2016
| 212.129.55.244 Wed Oct 12 21:57:52 2016
| 213.202.233.54 Wed Oct 12 21:58:19 2016
| 213.202.233.54 Wed Oct 12 21:59:34 2016
| 213.202.233.54 Wed Oct 12 22:00:47 2016
| 213.202.233.54 Wed Oct 12 22:02:02 2016
| 188.165.201.67 Wed Oct 12 22:02:47 2016
| 212.129.55.244 Wed Oct 12 22:03:16 2016
| 213.202.233.54 Wed Oct 12 22:03:16 2016
| 85.25.207.90 Wed Oct 12 22:03:53 2016
...