diff --git a/src/core/operations/ExtractIPAddresses.mjs b/src/core/operations/ExtractIPAddresses.mjs
index 95e0a50fd8..3702846c28 100644
--- a/src/core/operations/ExtractIPAddresses.mjs
+++ b/src/core/operations/ExtractIPAddresses.mjs
@@ -40,6 +40,11 @@ class ExtractIPAddresses extends Operation {
                 type: "boolean",
                 value: false
             },
+            {
+                name: "Defanged IPv4 Addresses",
+                type: "boolean",
+                value: false
+            },
             {
                 name: "Display total",
                 type: "boolean",
@@ -64,12 +69,18 @@ class ExtractIPAddresses extends Operation {
      * @returns {string}
      */
     run(input, args) {
-        const [includeIpv4, includeIpv6, removeLocal, displayTotal, sort, unique] = args,
+        const [includeIpv4, includeIpv6, removeLocal, includeDefangedIpv4, displayTotal, sort, unique] = args,
             ipv4 = "(?:(?:\\d|[01]?\\d\\d|2[0-4]\\d|25[0-5])\\.){3}(?:25[0-5]|2[0-4]\\d|[01]?\\d\\d|\\d)(?:\\/\\d{1,2})?",
+            ipv4Defanged = "(?:(?:\\d|[01]?\\d\\d|2[0-4]\\d|25[0-5])\\[\\.\\]){3}(?:25[0-5]|2[0-4]\\d|[01]?\\d\\d|\\d)(?:\\/\\d{1,2})?",
             ipv6 = "((?=.*::)(?!.*::.+::)(::)?([\\dA-F]{1,4}:(:|\\b)|){5}|([\\dA-F]{1,4}:){6})((([\\dA-F]{1,4}((?!\\3)::|:\\b|(?![\\dA-F])))|(?!\\2\\3)){2}|(((2[0-4]|1\\d|[1-9])?\\d|25[0-5])\\.?\\b){4})";
         let ips  = "";
 
-        if (includeIpv4 && includeIpv6) {
+
+        if (includeIpv4 && includeDefangedIpv4 && includeIpv6){
+            ips = ipv4 + "|" + ipv4Defanged + "|" + ipv6;
+        } else if (includeIpv4 && includeDefangedIpv4){
+            ips = ipv4 + "|" + ipv4Defanged;
+        } else if (includeIpv4 && includeIpv6) {
             ips = ipv4 + "|" + ipv6;
         } else if (includeIpv4) {
             ips = ipv4;