Is the pasted text uploaded anywhere?

No. Extraction runs entirely in your browser with JavaScript. Log files and email headers you paste never leave your device, which matters because they often contain sensitive data.

Which formats are recognised?

Plain IPv4 (203.0.113.7), IPv4 with port (203.0.113.7:443), full and compressed IPv6 (2001:db8::1), and bracketed IPv6 with port ([2001:db8::1]:8080). Invalid candidates like 999.1.1.1 are filtered out.

Can I look the addresses up afterwards?

Yes. Every extracted address links straight to its full IPWhois.net report with owner, ISP, ASN and reputation data.

Extract IP Addresses from Text

Paste log lines, email headers or any text

What this tool is for

Server logs, firewall exports, email headers and abuse reports bury the addresses you care about inside thousands of lines of noise. Paste the raw text here and you get a clean, deduplicated list of every IPv4 and IPv6 address it contains, with a count of how many times each one appeared. That count alone often tells you which host is hammering your server.

Everything runs locally in your browser, so pasting a production log here does not send it anywhere. Each extracted address links to its full IP lookup report, and if you suspect abuse you can check it against the IPWhois.net Blacklist.

Recognised formats

Plain IPv4 (203.0.113.7), IPv4 with port (203.0.113.7:443), compressed and full IPv6 (2001:db8::1), and bracketed IPv6 with port ([2001:db8::1]:8080). Candidates with out-of-range octets are rejected. The private-range filter removes RFC 1918, loopback, link-local and CGNAT space so only publicly routable addresses remain.