Querying IP Addresses

IP addresses are fundamental to security-oriented log analysis. Tailpipe includes DuckDB's inet extension which supports CIDR notation.

You can find requests from a specific IP address:

You can find requests to or from an IP address:

You can find requests from IPs that are within a specific network range:

You can find requests not from internal networks: