A server log line
Pasting "Connection from 203.0.113.45 to 10.0.0.8 refused" extracts both 203.0.113.45 and 10.0.0.8 as a clean list.
Extract IPv4 addresses from server logs or any text instantly — free IP extractor.
About
Paste a server log, a firewall report, or any block of text mentioning addresses, and get every IPv4 address pulled out as a clean list. Matching is checked against dotted-quad notation with each octet verified to be 0-255, so it won't false-positive on something like 999.999.999.999.
Developers and system administrators use it to pull the IP addresses out of a pasted log file, firewall report or email header so they can check or block them. It's one of many free text tools on Toolapt, and like every tool here, it's free to use with no sign-up and no limit on how much text you scan.
Examples
4 worked examples
Pasting "Connection from 203.0.113.45 to 10.0.0.8 refused" extracts both 203.0.113.45 and 10.0.0.8 as a clean list.
Pasting a line containing "999.999.999.999" does not match it, since each octet is checked to be within 0-255 and 999 fails that check.
Pasting a report with several lines mentioning 192.168.1.1, 172.16.0.254 and 8.8.8.8 extracts all three addresses at once, ignoring the surrounding text.
"Connection from 203.0.113.7:51544 refused" extracts 203.0.113.7.
FAQ
Quick answers to common questions about the IP Address Extractor.
Paste your text above, make sure "IP Addresses" is selected as the type, then click Extract. Every matched address is listed below — nothing is uploaded anywhere.
Yes. It's free, with no sign-up and no limit on how much text you scan.
Yes — each octet is checked to be within 0-255, so a number like 999.999.999.999 that merely looks like an IP address in dotted-quad shape won't be matched.
No — matching targets IPv4 dotted-quad notation only; IPv6 addresses use a different format and aren't matched by this extractor.
Yes — the same tool also finds emails, links, domains, numbers and hashtags/mentions. Switch the type dropdown, or use one of the dedicated extractor pages below.
No. Extraction runs entirely in your browser — nothing is sent to a server.
Yes. It extracts the address and leaves the port behind, so 10.0.0.1:8080 gives 10.0.0.1.
With "Sort results" on, addresses are compared number by number rather than as plain text, so 10.0.0.9 comes before 10.0.0.10.
It extracts the address part, 192.168.0.0, and drops the /24. To see the range a CIDR block covers, paste it into the IP Subnet Calculator.
No — it only lists them. The private ranges are 10.x.x.x, 172.16.x.x to 172.31.x.x and 192.168.x.x; most other addresses, apart from special ones like 127.0.0.1 for your own machine, are public.