SOLVED

Query returns external IPs (but VM has only private IPs)

Regular Contributor

Hello,

I use Azure Log Analytics and have this query:

 

"Heartbeat | where OSType == 'Windows'| summarize arg_max(TimeGenerated, *) by SourceComputerId | sort by Computer | render table"

 

In response, I get external IPs in the ComputerIP column (Example 40.68.38.236).
What is it about the IPs?

Since these VMs only use private IPs.

 

Regards

Stefan

1 Reply
best response confirmed by Stefan Kießig (Regular Contributor)
Solution

@Stefan Kießig 

 

even if an Azure computer is not associated to a Public IP via a NIC, Load Balancer, etc., when it does outbound Internet requests, SNAT comes into play and an IP from a pool of Azure IPs is assigned to your resource (more details here).