log answer

log answer: a task in scrivania-harbor (Harbor dataset). I need a hand: which IP address appears most often in the "login failed" lines across all the logs logs/gateway.log (including the compressed .gz one)?. Answer with the IP, without changing anything.