I’m finding that the parsing for IPV4 addresses is better in the slack plugin than using the ExtractIt plugin. There is a pattern too, ones that start or end with a 1 in the octet are usually not parsed correctly.
100.1.63.7
100.1.97.211
100.37.74.12
100.38.181.7
100.40.211.55
104.218.117.4
For instance 100.1.97.211 was extracted as :
0.1.97.211
I should add the input for this case is a sender emailing copy-pasted ips into the email and sending to ICON.