Skip to main content
Azure - Find hint about the IP address using KQL

#cloud #azure

Hi All!

As we are in cloud, we may have a thought / necessitate to find about the public IP details like country, city.

Consider a scenario that one of a storage account in your organization's azure subscription has the public network access as "Enabled from selected virtual networks and IP addresses"

i.e. It can be accessed from the VNet/Subnet associated with and also included Firewall address range (Individual IP when you're working from home).

Now, aforementioned storage account has some individual IP(s), you need to find the last/latest IP added details/Clue.

Azure KQL offers a feature called geo_info_from_ip_address() to get some hint about the public IP like country, city, langtitude etc..

Above mentioned scenrio is just for an example but you can have different scenarios.

Note: This feature is not giving you exact details about IP address

You can got to Logs menu of a azure and try as below

Comments

Post a Comment

Popular posts from this blog

View powershell history and invoke Hi All! When you do administration activities, you may need to work around with multiple commands in powershell. It is bit difficul to remember all the commands we tried because some of them may be fetched from internet. Consider you tried more than 100 commands in current powershell session and may require to try the same large command. One of the way is you can press up arrow many times to see the previously tried command. we have another easy way is to see the history and invoke it by using its order number instead of whole command typing. Please look into the below example
Post a Comment
Read more
Azure Public IP(s) are zone redundant free of cost natively - Generally Available Availability zone gives high availability to an application as well as information by forestalling the physical datacenter disappointments by involving replication of the asset in extra datacenter. Azure typically has 3 zones per region (and not all regions support zone). Thus, while setting up the environment we really want to pick the right region based on our usecase. Public IP helps to access a resource or an application publicly. Azure offers 2 types of SKU for public IP as below Basic Standard Only Standard SKU gives zone facility. Basic SKU is always non-zonal and this SKU also will be retired 09/2025. Standard public IP can be fell into any of the below category No Zone / Non-Zonal - No availability zone at all Zonal - Our services can be replicated in any one of selected zones from three zones. Zone redundant - Resource will be replicated in all 3 zones. It is opposite of...
Post a Comment
Read more
Wow! Monitor web apps running in azure VM and VMSS via app insights Hi All! Application insights monitors the telemetry of web applications, function app, APIM and etc., Consider a scenario that your organization has some web applications hosted in IIS of an azure VM and they want to monitor performance of those applications. Azure VM was not the eligible candidate to map with Application insights then how can we monitor app(s) running inside azure VM? Now azure offers the feature of monitoring azure vm's web applications through application insights generally available. Please follow the below steps and have a look into the picture You need to have a connection string of an existing application insights. If have, copy it. Go to the VM which has web apps running in IIS Click "Extension+applications" and then click Add Find Application insights agent for .NET and click next Paste the copied connection string of app insights and click Review+Cre...
Post a Comment
Read more