Log IP extractor
Find the IP addresses that made the most requests in an access log. Useful for spotting brute-force attempts and scrapers before you check them in the bulk checker.
Frequently asked questions
- Is my log file uploaded anywhere?
- No. The file is read in your browser and counted there. Nothing is sent to our servers unless you choose to copy the IP list and check it yourself.
- Which lines are counted?
- The first field of each line is taken as the client IP. This matches Apache and nginx access logs in their default format. Lines whose first field is not an IPv4 address are skipped and counted separately.
- Why do private addresses appear?
- Requests can come through a load balancer or proxy, so the first field may be an internal address. Those are marked, so you can tell them apart from public visitors.