<p>I've noticed some logs in my Zabbix, telling me that some random IP, from my private subnet, is trying to log in as <code>guest</code> user. I know the IP is <code>10.190.0.1</code> but there are currently no pods with that IP. Does anyone have any idea how to see which pod had it?</p>
<p>The first thing I thought of, is looking and GCP Log Exporter, but we're not adding labels to logs with what POD it is. I'm sure I should be able to see it from the terminal level. So any suggestion would be nice.</p>
<p>Also, I know it won't be reserved but I took a look either way</p>
<pre class="lang-sh prettyprint-override"><code>gcloud compute addresses list | grep '10.190.0.1'
&lt;empty line&gt;
</code></pre>
<p>and</p>
<pre class="lang-sh prettyprint-override"><code>kubectl get all -o wide -A | grep 10.190.0.1
&lt;empty line&gt;
</code></pre>

CptDolphin
<p>Hi you are doing the right way.
I mean the:</p>
<pre><code>kubectl get pods,svc -o wide
</code></pre>
<p>will effectively show you the pods and services and their IP. If the line is empty though, it is because there is no such IP in services or pods in your cluster workoads. two things to check:</p>
<ul>
<li>maybe the IP has changed</li>
<li>maybe this logs come from an IP in the master node? something from the k8s control plane?</li>
</ul>
<p>bgess</p>
