I have rules like this in my IPTABLES:
-A INPUT -s 22.214.171.124/32 -j LOG --log-level 7
and I wrote a script that grabs the output of these rules and outputs the bytes from the IP to my server.
I was hoping to get suggestions on how I could create a rules that tracks ip traffic from dispersant subnets. The ip address aren't fixed and even the subnets aren't fixed. For example:
126.96.36.199 could be the ip address of the device one day and 188.8.131.52 could be the ip address of the same device the next day.
I think that if there was a way to write the rule so that it gave me the ip address of everything except a range of ip address that are fixed, like 184.108.40.206 then I would be ok.
-A INPUT -s NOT EQUAL 220.127.116.11/32 -j LOG --log-level 7
Thanks in advance