Use the free Extract IP Addresses from Text below: your data never leaves your browser — all work happens on your device, and nothing is uploaded to any server.
IP addresses scattered through logs and notes
Server logs, support tickets, network notes and security reports are full of IP addresses mixed in with everything else. Finding them by eye means scanning line after line of timestamps, paths and error messages, and a single mistyped digit turns a useful address into a dead end. An extractor pulls them all out into one clean list that you can paste into a lookup tool, a firewall rule or a spreadsheet.
This tool finds both kinds of address: the familiar dotted IPv4 form such as 192.168.1.1 and the longer colon-separated IPv6 form such as 2001:db8::1. Each match is labelled with its version, duplicates are removed by default, and the whole job happens in your browser with nothing uploaded anywhere.
Why IPv4 matches are validated, not just pattern-matched
A naive pattern for IPv4 would accept anything shaped like four dot-separated groups of digits, including 999.1.2.3, which is not an address at all because no octet may exceed 255. This tool checks every octet: it must be digits only, between 0 and 255, and without a leading zero unless the octet is exactly zero. Look-alike numbers are rejected rather than passed on, so the list you copy contains only addresses that could actually exist.
IPv6, briefly
IPv6 addresses use hexadecimal groups separated by colons, and the double colon stands for one or more groups of zeros. The tool matches the common compressed and full forms, including addresses such as 2001:db8::1 and fe80::1ff:fe23:4567:890a. Because IPv6 text appears in many shapes, the tool requires at least two colon-separated groups and at least one hexadecimal digit, which keeps stray colons in ordinary text out of the results. Unusual forms such as IPv4-mapped IPv6 addresses may still need a manual check.
What this tool is not
Extraction is not identification. An IP address on its own does not prove who used it, where they were, or whether the traffic was malicious, and addresses are often shared, reassigned or hidden behind VPNs and proxies. This tool does not look anything up, does not test whether an address responds, and does not judge whether it is safe or dangerous. Use the extracted list as input to a proper lookup or monitoring tool, and treat conclusions about people with care.
Practical uses
Network administrators collect addresses from logs when tracing a fault. Support teams gather the addresses a customer connected from. Security reviewers pull addresses from incident notes for blocklists. Students learning networking practise recognising the two address families in realistic text. In each case the extractor removes the tedious scanning step and leaves the analysis to the person.
Public, private and reserved ranges
Not every valid IPv4 address is reachable on the public internet. Ranges such as 10.0.0.0 to 10.255.255.255, 172.16.0.0 to 172.31.255.255, and 192.168.0.0 to 192.168.255.255 are private, meant for home and office networks, and they appear constantly in logs precisely because internal traffic is so common. The address 127.0.0.1 always means the machine itself. Reserved and documentation ranges such as 192.0.2.0 to 192.0.2.255 exist so examples can use realistic-looking addresses without pointing at real systems. Knowing which bucket an extracted address falls into is often the first step of an investigation: a private address in an external-facing log means something different from a public one, and a documentation address in a real log usually means someone copied an example by mistake.
Privacy note
IP addresses can count as personal data, especially when tied to times and accounts, so handle logs with care. Because this tool runs entirely on your device, your pasted logs never travel to a server and no copy is kept. That makes it safe to use on sensitive material, but it does not make the output safe to share: keep extracted lists private, share only what the task needs, and delete them when the job is done.
Related tools
- Extraer Direcciones IP de un Texto (Spanish version)
- Extract Keywords from Text
- Extractive Text Summarizer