Prefer IP to HOST for IPORHOST match

By matching for HOST first, Logstash will read an IP address as a hostname. This change uses the HOST pattern and prefers the IP pattern for it when requesting IPORHOST.