Azure - Find hint about the IP address using KQL
#cloud #azure
Hi All!
As we are in cloud, we may have a thought / necessitate to find about the public IP details like country, city.
Consider a scenario that one of a storage account in your organization's azure subscription has the public network access as "Enabled from selected virtual networks and IP addresses"
i.e. It can be accessed from the VNet/Subnet associated with and also included Firewall address range (Individual IP when you're working from home).
Now, aforementioned storage account has some individual IP(s), you need to find the last/latest IP added details/Clue.
Azure KQL offers a feature called geo_info_from_ip_address() to get some hint about the public IP like country, city, langtitude etc..
Above mentioned scenrio is just for an example but you can have different scenarios.
Note: This feature is not giving you exact details about IP address
You can got to Logs menu of a azure and try as below
Comments
Post a Comment