Is the builder free?
Yes. It is free, needs no signup and runs in your browser, so nothing you paste is sent to AdProtektor or anyone else.
Free tool
Google Ads IP exclusion list builder
Paste addresses from server logs, a CSV export or a report, in any layout. You get a list in the format Google Ads accepts, with repeats removed, the most active addresses first and the ones in cloud and hosting networks marked, ready to copy into your account or campaign settings. Paste a server log and it counts each address’s Google Ads clicks, so repeat clickers come first.
- Free, with no signup
- Runs in your browser: nothing you paste is sent anywhere
- Fits Google’s 500-entry lists
addresses share the first three parts
0 entries
Runs in your browser. Nothing you paste is sent anywhere.
How to use it
Paste the addresses
One per line, separated by commas, or straight from a log line: the builder picks out IPv4 and IPv6 addresses, strips ports, reads /32 and /24 blocks and skips anything that isn’t an address.
Decide on ranges
The builder marks addresses in cloud and hosting networks, and can keep only those. Optionally, combine addresses that share their first three parts into one entry, such as 203.0.113.*; it builds these ranges only inside cloud and hosting networks, because on a mobile carrier or home broadband provider a range also hides your ads from real customers.
Copy it into Google Ads
Account list: Admin → Account settings → IP exclusions. Campaign list: Campaigns → Settings → Additional settings → IP exclusions. If more than 500 entries are left, the first 500 are the most active and the rest are listed separately.
What Google Ads accepts
- Exact IPv4 and IPv6 addresses, one entry each. Google advises excluding every version of an address you want to block, so an IPv6 address needs its own entry.
- IPv4 ranges with an asterisk in place of the last part, such as 203.0.113.*, which covers 256 addresses.
- 500 entries on each campaign’s list and 500 on the account list. A campaign is closed to both, so a Search campaign can exclude up to 1,000 addresses.
- Performance Max takes only the account list. Campaign lists aren’t available for Performance Max, video, App, hotel and Smart Display campaigns.
Source: Google Ads Help, Exclude IP addresses.
Which sources deserve the account list, and how to keep 500 slots from going stale: Google Ads IP exclusion limits and how to spend them.
FAQ
Questions about IP exclusions
How many IP addresses can I exclude in Google Ads?
500 on each campaign’s list and 500 on the account list. A campaign is closed to every address on both, so a Search campaign can exclude up to 1,000 in total. Performance Max uses only the account list.
Can I exclude a range of IP addresses?
Yes, for IPv4: put an asterisk in place of the last part, such as 203.0.113.*, to exclude 256 addresses. Use ranges for datacenter and hosting networks, not mobile carriers or home broadband, where they also block real customers.
Why does it skip some addresses?
Private and reserved addresses, such as 10.0.0.5 or 192.168.1.20, belong to internal networks and never appear as the address of an ad click, so excluding them would only use up slots. Text that isn’t an IPv4 or IPv6 address is skipped too, and both are counted under the result.
Does excluding an IP address get my money back?
No. An exclusion stops your ads from showing to that address from then on. Google still charges for the click that first revealed the source, and it decides credits for invalid clicks separately.
How does it know an address belongs to a datacenter?
It checks each IPv4 address against the ranges Amazon Web Services, Google Cloud, Microsoft Azure, Oracle Cloud, DigitalOcean, Akamai (Linode) and Vultr publish, and the networks Hetzner, OVHcloud, Contabo, Scaleway, Alibaba Cloud, Tencent Cloud and Huawei Cloud announce. The list loads into your browser, so nothing you paste leaves it. An address outside those networks can still belong to a datacenter, and some real people browse from cloud addresses, through a VPN or a virtual desktop.
Can I paste a raw server log?
Yes. When the lines carry a Google Ads click ID (gclid, gbraid or wbraid), the builder counts only those lines and, for each address, the distinct click IDs, so a reload or the images a landing page loads are not counted again. It keeps the addresses with at least as many ad clicks as you choose, 3 to start. Behind a proxy or load balancer it takes the first public address on the line; if your server sits behind a CDN, use a log that records the visitor’s own address.
Stop keeping the list by hand
AdProtektor scores every visit, excludes the sources it blocks from your Google Ads campaigns and removes an exclusion when the block ends. Exclusions you added yourself are left alone.