IP can be $6 or $7 depending on the log message. Maybe change the message to: A registration HAS failed
2017-07-03T08:56:09+0000 A registration was atempted User:9999 IP:185.97.132.67
2017-07-03T08:56:09+0000 A registration failed User:9999 IP:185.97.132.67
2017-07-03T08:56:27+0000 A preregistration was atempted User:9999 IP:185.97.132.67
2017-07-03T08:56:29+0000 A registration was atempted User:9999 IP:185.97.132.67
2017-07-03T08:56:29+0000 A registration failed User:901133977198350 IP:185.97.132.67
2017-07-03T08:56:49+0000 A preregistration was atempted User:9999 IP:185.97.132.67
2017-07-03T08:56:49+0000 A registration was atempted User:9999 IP:185.97.132.67
2017-07-03T08:56:49+0000 A registration failed User:801133977198350 IP:185.97.132.67
IP can be
$6
or$7
depending on the log message. Maybe change the message to:A registration HAS failed