I have rules like this in my IPTABLES:
-A INPUT -s 184.108.40.206/32 -j LOG --log-level 7
and I wrote a script that grabs the output of these rules and outputs the bytes from the IP to my server.
I was hoping to get suggestions on how I could create a rules that tracks ip traffic from dispersant subnets. The ip address aren't fixed and even the subnets aren't fixed. For example:
220.127.116.11 could be the ip address of the device one day and 18.104.22.168 could be the ip address of the same device the next day.
I think that if there was a way to write the rule so that it gave me the ip address of everything except a range of ip address that are fixed, like 22.214.171.124 then I would be ok.
-A INPUT -s NOT EQUAL 126.96.36.199/32 -j LOG --log-level 7
Thanks in advance