from collections import defaultdict
import re

ip_dict = defaultdict(list)

for each in f1:
    if "tcp" in each and "denied" in each and "%SEC-6-IPACCESSLOGP" in each:
            ip = re.findall(r'[0-9]+(?:.[0-9]+){3}', each)
            ips = ip[1]
            packets = re.findall("(?<=, )w+", each)
            ip_dict[ips].append(packets[0])