Unkown Azure IP in logs for APIM

@Benedikt Mühlek Following the activation of the Azure API Management Developer Portal, we have observed unexpected access to our API Management services from the IP address 20.121.82.216. This IP is associated with Azure infrastructure. Although it does not appear in incident logs or firewall alerts, it aligns with known IP ranges utilized by Azure API Management gateways and developer portals.

Upon enabling the Developer Portal, Azure may employ its managed infrastructure to deliver content, facilitate API testing, and route traffic. Specifically, the portal includes a test console capable of invoking APIs through backend services. These invocations may originate from Azure-managed IP addresses rather than the developer’s local IP.

In scenarios where anonymous access is permitted or internal testing is configured, Azure may simulate or proxy requests using its own IP addresses.

To investigate and manage this behavior, we recommend the following actions:

• Review Gateway Logs: Utilize Azure Monitor or Diagnostic Logs to determine whether the IP address is associated with test console or portal activity.
• Restrict Access: If necessary, implement IP restrictions or enforce authenticated access using Microsoft Entra ID.
• Audit Portal Settings: Navigate to your API Management instance in the Azure Portal, then access Developer Portal → Identities → Settings. From there, you may disable anonymous access or require user sign-in.

I hope this helps in resolving the issue, do let me know if you have any further questions on this

@Benedikt Müller Just checking to see if you have a chance to check my previous response and helped, do let me know if you have any further questions on this.