Find the IP that is not related to the server administrator and users. (In journalctl or receive input in the form: [python unknown-ips.py 'cat /var/log/auth.log'] or any other text input)

unknown-ips.py

#!/usr/bin/env python
"""HDME - 19/12/2018"""
import os
import sys
print("begin")
ipvalid =  ' |grep -oE "\\b(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\\b"'
if len(sys.argv) > 1:
        logsv = os.popen(sys.argv[1] + ipvalid).read().splitlines()
else:
        logsv = os.popen('journalctl' +ipvalid).read().splitlines()
lastu = os.popen('last').read().splitlines()
flag = 0
sumi = []
tryd = []
for i, ip in enumerate(logsv, start=0):
        flag = 1
        for j, linlast in enumerate(lastu, start=0):
                if  len(linlast) > 3:
                        if linlast.split()[0] != 'reboot':
                                ipl = linlast.split()[2]
                                if ipl == ip:
                                        flag = 0
                                        break
        if flag == 1:
                if 0 < len(sumi):
                        for k, arry in enumerate(sumi, start=0):
                                if ip == arry:
                                        flag = 0
                                        tryd[k] = tryd[k]+1
                                        break
                if flag == 1:
                        sumi.append(ip)
                        tryd.append(1)
for m, val in enumerate(sumi, start=0):
	tmps = "unknown-IP = " + val + ' ~ ' + str(tryd[m])
        print(tmps)
print("end")