IP extractor and sorter

Paste any text, like server logs, email headers or HTML, to pull out every IPv4 and IPv6 address in it. Remove duplicates, sort them, and count them by network.

Addresses

4 unique addresses

Example: paste your own text above.

Found 5 addresses, 4 unique: 4 IPv4 and 1 IPv6.

Counts are in the CSV and in the groups.

203.0.113.25
10.0.0.12
198.51.100.7
2001:db8:5::25

How it works

The extractor reads the text and keeps anything that is exactly one valid IPv4 or IPv6 address. It understands the forms mail servers and web servers write: [192.0.2.1], 192.0.2.1:25 with a port, [2001:db8::1]:443, the SMTP form IPv6:2001:db8::1 in Received headers, and IPv4-mapped addresses like ::ffff:192.0.2.1.

It skips things that only look like addresses: version numbers with five parts (1.2.3.4.5), times (10:11:12), MAC addresses, and numbers glued to letters.

"Hide private and reserved" drops addresses that can't be on the public internet: private networks (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16), loopback, link-local, carrier NAT and multicast. Grouping by network shows which /24 or /64 sends the most, which helps when one provider uses many addresses.

To check the addresses against your own ranges, use the IP in range check. To turn them into firewall rules, use the allowlist formatter. To read a whole email header, use the header analyzer.