From telemetry we can tell a lot of IPs are internal (192.x, 172.x, 10.x). Many deployments are not setting the IP forwarding header config option (e.g. X-Forwarded-For).

The option not being specified reduces the value of tracking IPs with Audit Logging, so we should create a health check to promote the config option usage.