Query returns external IPs (but VM has only private IPs)

Iron Contributor


I use Azure Log Analytics and have this query:


"Heartbeat | where OSType == 'Windows'| summarize arg_max(TimeGenerated, *) by SourceComputerId | sort by Computer | render table"


In response, I get external IPs in the ComputerIP column (Example
What is it about the IPs?

Since these VMs only use private IPs.




1 Reply
best response confirmed by Stefan Kießig (Iron Contributor)

@Stefan Kießig 


even if an Azure computer is not associated to a Public IP via a NIC, Load Balancer, etc., when it does outbound Internet requests, SNAT comes into play and an IP from a pool of Azure IPs is assigned to your resource (more details here).