import re
p = re.compile(r'\b[a-f0-9]{2}(?:([:-]?)[a-f0-9]{2}(?:\1[a-f0-9]{2}){4}|(?:\.?[a-f0-9]{2}){5})\b', re.IGNORECASE)
s = "Jun 16 10:24:28 (2248) Login OK: cli 88-c9-d0-fd-13-65 via TLS tunnel)\nJun 16 10:24:35 (2258) Login OK: cli f8:a9:d0:72:0a:dd via TLS tunnel)\nJun 16 10:24:44 (2273) Login OK: cli 485a.3f12.a35a via TLS tunnel)"
print([x.group() for x in p.finditer(s)])
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