if  (my ($ip) = $line =~ /\[(\d+\.\d+\.\d+\.\d+)\].*Relay access denied/) {
    print "$ip\n";
}