Skip to main content
Back to the Footgun Database
CostLowCommonAZF-0004

A reserved Standard public IP keeps billing after whatever it fronted is gone

Standard SKU public IPs are always statically allocated and always billed. When the load balancer or NIC they fronted goes away, the IP keeps charging.

Footgun ID
AZF-0004 (Azure Footgun No. 4)
Azure service
Azure Virtual Network
Resource type
Microsoft.Network/publicIPAddresses
Updated
July 1, 2026

What it is

A Standard SKU public IP address with no ipConfiguration, meaning it is not associated with any network interface, gateway, or load balancer. It routes traffic for nothing, but a Standard IP is always allocated and always billed.

Impact (cost)
~$3.65/month at list price per idle Standard static IP
Basis: Azure list price. Figures are estimates, not measurements.

Why it happens

Standard public IPs are statically allocated by design and bill from the moment they exist until they're deleted, attached or not. They get stranded when a load balancer is rebuilt, a VM is deleted, or a gateway is migrated, and the IP is left behind so the old address can be "kept just in case."

Any single one is cheap, which is exactly why nobody cleans them up. They accumulate quietly across subscriptions.

What it costs / blast radius

Each idle Standard static IP is about $3.65/month at list price, roughly $44/year. (List price; bundled IPs on some SKUs differ.) The cost story here isn't one IP, it's the dozens that pile up across a large estate, plus the address-space clutter that makes every network review slower.

See it

Find them: public IPs with no ipConfiguration
Resources
| where type =~ 'microsoft.network/publicipaddresses'
| where isnull(properties.ipConfiguration)
| project name, resourceGroup, subscriptionId,
          sku = sku.name, allocation = properties.publicIPAllocationMethod
Fix: release the address once you've confirmed nothing needs it
az network public-ip delete \
  --name pip-prod-eastus-04 --resource-group rg-prod

How StratoLens helps

StratoLens surfaces every unassociated public IP across every subscription in one list, so the long tail of $44/year strays gets cleaned up in one pass instead of never. It's the kind of low-stakes, high-volume waste that only gets fixed when something is watching for it continuously.

Start Your 28-Day Free Trial

Every feature unlocked. Deploys to your Azure tenant. No data leaves your tenant.

Available now on the Azure Marketplace.

Built for Azure infrastructure teams who need complete visibility across their entire estate.