Hi,
From your screenshot it appears you've selected Azure DDoS Network Protection by mistake, which costs $2,944/month for up to 100 IPs. I'm assuming you only have one Azure subscription. Please let me know if my assumption is incorrect.
As a first step I recommend you immediately Disable this on all virtual networks/public IPs and delete your DDoS Protection Plan to stop future billing. To do this please navigate to each one of your virtual networks in the Azure portal, on left click on Settings -- DDoS protection, and then on right select Disable and click Save button.
To disable on individual public IPs please navigate to each one of your public IP addresses in portal, then click Properties tab on right, under DDoS protection click on link to change Protection type and choose Disable.
After disabling on your virtual networks/public IPs please navigate to your DDoS Protection Plan and click Delete and confirm. Please wait for notification message in upper right corner of portal and make sure it says the delete was successful.
Once you think you have completed the above, please open Azure Cloud Shell (PowerShell mode) and execute below command:
Get-AzPublicIpAddress|Select Name,ResourceGroupName -ExpandProperty DdosSettings
This should give you list of public IPs in current subscription along with their DDoS Protection settings. Please post output here (block out any sensitive names if necessary). The purpose of this step is to confirm that none of your IPs have DDoS Protection Enabled (we will enable it again below).
In the sample output above web-prod-pip
has DDoS IP Protection Enabled, resulting in $199/month charge. The other two are okay since they are either Disabled or in the case of web-uat-pip
DdosProtectionPlan is blank.
In your case you should only see Disabled or VirtualNetworkInherited with DdosProtectionPlan blank.
Next please execute below command in your cloud shell to check if there are any DDoS Protection Plans in your subscription:
Get-AzDdosProtectionPlan
The output should be blank since you deleted your DDoS Protection Plan above.
Finally, please navigate to the Public IP address that you would like to protect with Azure DDoS IP Protection. On Overview blade, click on Properties tab on right, under DDoS Protection click on Protection type, select IP specific to this IP address and click Save.
I recommend you re-run above powershell commands to double-check that you only have DDoS Protection enabled on one IP and there are no DDoS Protection Plans.
Please click Accept Answer and upvote if the above was helpful.
Thanks.
-TP