IP Address Extractor

Extract IP addresses from text, log files, and configs in one step. Every match is checked, so invalid values like 999.1.1.1 are left out, and you can sort, dedupe, and filter the list.

Updated
Runs in your browser. Your data is not uploaded.

How to use the IP Address Extractor

  1. Paste text into Text, log, or config, drop a file on it, press Upload, or press From URL to load a log that is online.
  2. Choose what to Find and tick the options you need: Remove duplicates, Sort numerically, Exclude private and reserved, or Show how often each appears.
  3. Copy the list under IP addresses found or download it as a .txt file.

How it works

Extraction runs in two passes:

  1. A pattern finds anything shaped like an address: four dot-separated numbers for IPv4, or hex groups joined by colons for IPv6. Digits glued to the match are ruled out, so 1.2.3.4.5 is not read as 1.2.3.4.
  2. Each candidate goes through the same strict parser as the subnet tools. Octets over 255, octets with leading zeros, and colon strings that are not IPv6, such as times (12:30:45) or MAC addresses, are dropped.

IPv6 results are shown in compressed RFC 5952 form, so 2001:0DB8:0:0::1 and 2001:db8::1 count as one address. The numeric sort orders by value, so 10.0.0.9 comes before 10.0.0.10.

Examples

  • From Failed password for root from 203.0.113.45 port 52211 the result is 203.0.113.45; the port is not attached.
  • server 10.0.0.12:8080; gives 10.0.0.12.
  • [2001:db8::1]:443 gives 2001:db8::1.
  • 999.10.10.1 and 1.2.3.4.5 give nothing.

Limitations

  • Addresses written in other notations, such as a 32-bit integer or hex, are not recognized as IPs. Convert them with the IP Address Converter.
  • A CIDR block like 10.0.0.0/8 is returned as its address, 10.0.0.0, without the prefix.
  • From URL works only when the other site allows browsers to read it (CORS). If it refuses, download the file and upload it instead.
  • Files up to 5 MB can be uploaded or loaded. Results update as you type for inputs up to 200 KB; press Extract for larger ones.

Frequently asked questions

How do I get a list of unique IPs from a log file?

Upload or paste the log, keep Remove duplicates ticked, and tick Sort numerically. Tick Show how often each appears to see which addresses hit your server the most.

Does it find IPv6 addresses?

Yes, in any valid spelling, including compressed forms and addresses with a dotted IPv4 tail. Set Find to IPv6 only to list just those.

Is my log uploaded anywhere?

No. The file is read and searched in your browser, and nothing is sent to a server.

Often used together with the IP Address Extractor.