Forum Discussion
Location from IP
Is there's a way to find out the location i.e. city and country from IP address?
I am using AzureActivity table and want to plot the activities on a GeoMap.
In order to do that I need to find out the location from CallerIp address.
Can somebody please let me know if we can do this.
Also, subsequently, I have to find if the IP is blacklisted as well
uditk14 Inside of Azure Sentinel, no there isn't. You could use a Logic App that performs this query and saves the information into a separate custom table that you can then query. Also, depending on what you are doing with the data, you can use Azure Notebooks to do the query. These notebooks can use both data inside of and an external to Azure Sentinel.
As far as using a blacklist, take a look at this blog post that discusses the externdata command: https://techcommunity.microsoft.com/t5/azure-sentinel/implementing-lookups-in-azure-sentinel/ba-p/1091306
