cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Oneagent is trying to communicate with a strange IP address

juanrergis
Participant

I have a oneagent that is trying to communicate to the following IP address 11.100.XXX.XXX, 11.100.XX.XXX. Should I consider it a security threat?

4 REPLIES 4

tijust1
Advisor

@juanrergis Did you get a chance to verify from your network team?

Is this SAS environment or Managed?

Thanks,

Tijust

Dynatrace Professional Certified

Julius_Loman
DynaMight Legend
DynaMight Legend

First check if the IP address is not within the list of endpoints for OA by running oneagentctl --get-server

 

If this is the case, then most likely the IP address comes from one of your ActiveGates which you can confirm in Deployment status.

Certified Dynatrace Master | Alanata a.s., Slovakia, Dynatrace Master Partner

juanrergis
Participant

Hello, it is an on-premise environment, the ip you mention is within the environment that raise the kubernets in Rancher, apparently the agents do not see as first option and try to connect through the other interface, is there any way I can define the ip addressing that raises or if this is corrected by assigning a network zone

Hey @juanrergis ,

Sure it's possible by defining the dnsEntryPoint for the ActiveGate in custom.properties. If it's a containerized ActiveGate in Kubernetes, then you need to specify that in the DynaKube resource as shown here.

Certified Dynatrace Master | Alanata a.s., Slovakia, Dynatrace Master Partner

Featured Posts