Actually, the regex "mostly works".

The problem with this regex is that the DATA does not have an immediate newline following it (there is a space). If the space is removed - or a simple (.+)? is added between the IP match and the newline, the first regex works fine. I'll leave someone else to do the benchmarks :-)

That's of course, if the original poster wants the new line before the line with the IP