I have rules like this in my IPTABLES:
-A INPUT -s 126.96.36.199/32 -j LOG --log-level 7
and I wrote a script that grabs the output of these rules and outputs the bytes from the IP to my server.
I was hoping to get suggestions on how I could create a rules that tracks ip traffic from dispersant subnets. The ip address aren't fixed and even the subnets aren't fixed. For example:
188.8.131.52 could be the ip address of the device one day and 184.108.40.206 could be the ip address of the same device the next day.
I think that if there was a way to write the rule so that it gave me the ip address of everything except a range of ip address that are fixed, like 220.127.116.11 then I would be ok.
-A INPUT -s NOT EQUAL 18.104.22.168/32 -j LOG --log-level 7
Thanks in advance