Azure Sign In Log IP

[Anri_19]

Hi, 

Wanted to ask regarding the IP address showing on the Azure Sign In logs. 

From Microsoft Docs the Ip showing on the sign in logs informs:

IP address - The IP address of the device used to connect to your tenant.

From one report i got it is showing the IP belonging to Microsoft as ISP. 

Do you guys know if there is any "trivial" explanation for that? Like, sometimes different data centers are involved when a user performs an activity, and that could explain that part of the foreign IPs?

Thank you, 

Anri

[#2]

Hi @Anri_19,

I believe this can happen if a user is signing in from within the Azure network, for example you provision an Azure VM in your subscription, RDP to it, and access the Azure Portal from the browse there. In that case your NATed outbound IP is one of Azure's public IP addresses and they are owned by Microsoft.