Databricks Workspace - Unknow IP access

ittzzmalind
New Contributor II

Azure monitor log showing unknow ip authentication requests to Databricks workspace .

 

-- When searched ip below url, result showing its from AZURE CLOUD : <Region> (the region is same as workspace)

https://azureipranges.azurewebsites.net/SearchFor

 

-- But Not present IN IP below docs

  --> Not directly present in azure ip ranges:

Download Azure IP Ranges and Service Tags – Public Cloud from Official Microsoft Download Center

-->Control plane ip ranges:

IP addresses and domains for Azure Databricks services and assets - Azure Databricks | Microsoft Lea...

 

      - How can we identify which resource is associated with this IP address?

  • Which specific Azure Databricks resource is this IP attempting to access (e.g., cluster, table, Unity Catalog, etc.)?
  • How can we determine whether this access request is legitimate or suspicious?
  • Could you provide a step-by-step process to validate and confirm these details?