Extractor for ip reputation feeds