# Agent Spoofing - Multiple Hosts Using Same Agent after update to 8.5.3

**URL:** <https://discuss.elastic.co/t/agent-spoofing-multiple-hosts-using-same-agent-after-update-to-8-5-3/321276>\
**Category:** Elastic Security\
**Created:** [December 15, 2022, 9:17am UTC](https://discuss.elastic.co/t/agent-spoofing-multiple-hosts-using-same-agent-after-update-to-8-5-3/321276 "2022-12-15T09:17:29Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Paradox](https://avatars.discourse-cdn.com/v4/letter/p/958977/32.png) [@Paradox](https://discuss.elastic.co/u/Paradox)\
**Post date:** [December 15, 2022, 9:17am UTC](https://discuss.elastic.co/t/agent-spoofing-multiple-hosts-using-same-agent-after-update-to-8-5-3/321276/1 "2022-12-15T09:17:29Z")

</div>

Hello,

since the update to ELS 8.5.3 we receive   
"Agent Spoofing - Multiple Hosts Using Same Agent" messages. We were able to narrow down the message to be related to the DHCP integration. As soon as this is activated, these messages appear in the Elastic-Security Alerts. Is the problem already known?

greetings

---

<div class="post-metadata">

**Author:** ![wsouza](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wsouza/32/92547_2.png) [@wsouza](https://discuss.elastic.co/u/wsouza)\
**Post date:** [December 25, 2022, 11:39pm UTC](https://discuss.elastic.co/t/agent-spoofing-multiple-hosts-using-same-agent-after-update-to-8-5-3/321276/2 "2022-12-25T23:39:33Z")

</div>

After the stack update, did you check for updates to the integrations? It is also interesting to check your Policies if they do not have any indication of abnormalities.

 ![print1](https://us1.discourse-cdn.com/elastic/original/3X/f/1/f11c041942d0e886791d4177015900af84f36493.png)

> [@Paradox](#):
>
> We were able to narrow down

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 22, 2023, 11:40pm UTC](https://discuss.elastic.co/t/agent-spoofing-multiple-hosts-using-same-agent-after-update-to-8-5-3/321276/3 "2023-01-22T23:40:00Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.