Skip to main content

Posts

Showing posts from June, 2023
Azure - Find hint about the IP address using KQL #cloud #azure Hi All! As we are in cloud, we may have a thought / necessitate to find about the public IP details like country, city. Consider a scenario that one of a storage account in your organization's azure subscription has the public network access as "Enabled from selected virtual networks and IP addresses" i.e. It can be accessed from the VNet/Subnet associated with and also included Firewall address range (Individual IP when you're working from home). Now, aforementioned storage account has some individual IP(s), you need to find the last/latest IP added details/Clue. Azure KQL offers a feature called geo_info_from_ip_address() to get some hint about the public IP like country, city, langtitude etc.. Above mentioned scenrio is just for an example but you can have different scenarios. Note: This feature is not giving you exact details about IP address You can got to Logs menu