DIRMail="/home/vmail/cur"

/bin/egrep -h -e ' IP .*[[:digit:]]{1,3}\.[[:digit:]]{1,3}\.[[:digit:]]{1,3}\.[[:digit:]]{1,3}' \
 $DIRMail/* |  awk '{print $4}'