How to identify the incoming connection of Azure storage blob container.

To check and identify which IP is hitting the Azure blob container, we need to enable the logs under Diagnostic settings – Log Analytics workspace – Enable Audit logs \ all logs

Run this query which will show from which agent \ IP and status.

StorageBlobLogs
| where AccountName == “Storage_AccountName”
| project TimeGenerated, OperationName, CallerIpAddress, UserAgentHeader, StatusCode
| order by TimeGenerated desc

calleripAddress is the one shows the IP and If the status if 409 then it is failed request and it shows the IP details

This entry was posted in Azure, Cloud and tagged , . Bookmark the permalink.

Leave a comment