NPM contacting Azure... why?

[KomtGoed]

Hi,

Saw in a firewall log that a dockerized NPM instance is trying to contact IP 150.171.109.101 on port 80, apparently used by Microsoft (Azure).

What's the reason for this?

I have a domain "being letsencrypted" but for totally different provider than Azure/MS.

[jc21]

This should not be happening. The only piece of code that communicates outwardly is backend/internal/ip_ranges.js and even that doesn't talk to Azure (unless for some strange reason AWS and Cloudflare are using them). There's a chance your domain is using a certbot plugin that's doing this? Or certbot itself is doing it?