I need to calculate RPS from IP addresses and detect its suspicious activity. I can do it via logs exploring.
I need to track only “external IP addresses” and addresses don’t belong to the “Nginx network”.
I can exclude unnecessary private IP addresses (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16). But I don’t understand what’s Nginx network IP addresses.
The example I got is mask like XXX.YYY… . I’ve tried to search such pattern through the whole configuration at the server where Nginx is deployed but have found nothing relevant.
Then I was told “I can get such addresses from Nginx documentation”. I’ve searched Nginx documentation but have found nothing like reserved IP addresses.
What am I missing?
