Query returns external IPs (but VM has only private IPs)

[Stefan Kießig]

Hello,

I use Azure Log Analytics and have this query:

"Heartbeat | where OSType == 'Windows'| summarize arg_max(TimeGenerated, *) by SourceComputerId | sort by Computer | render table"

In response, I get external IPs in the ComputerIP column (Example 40.68.38.236).
What is it about the IPs?

Since these VMs only use private IPs.

Regards

Stefan

[#2 · Accepted solution]

@Stefan Kießig 

even if an Azure computer is not associated to a Public IP via a NIC, Load Balancer, etc., when it does outbound Internet requests, SNAT comes into play and an IP from a pool of Azure IPs is assigned to your resource (more details here).