Microsoft Azure publishes 54,122 IP ranges.
Short answer
Microsoft publishes Azure’s ranges weekly as Service Tags: named groups such as AzureCloud, Storage, Sql or AzureFrontDoor.Frontend, each a list of prefixes. We import the global (non-regional) tags.
What it’s for
Use the tags to write firewall or network security group rules for a service instead of hard-coding addresses.
Sub-lists
AzureCloud · 4948AzureMonitor · 3187MicrosoftCloudAppSecurity · 2299LogicApps · 1921PowerPlatformInfra · 1522Sql · 1517CognitiveServicesManagement · 1511AppService · 1298AzureSiteRecovery · 1292AzureActiveDirectory.ServiceEndpoint · 1287AzureContainerRegistry · 1210AzureMonitor.Core · 1056DataFactory · 1002PowerBI · 939GuestAndHybridManagement · 907SqlManagement · 870LogicAppsManagement · 824AzureIoTHub · 814AzureMachineLearning · 809AzureCosmosDB · 801Windows365 · 754AppConfiguration · 737AzureKeyVault · 717ServiceBus · 711DataFactoryManagement · 694EventHub · 663AzureAttestation · 657AzureDatabricks · 656PowerQueryOnline · 655AzureMachineLearningInference · 633AzureConnectors · 610AzureEventGrid · 606AzureBackup · 594AzureArcInfrastructure · 589Storage · 576AzureSentinel · 541AppServiceManagement · 515ApiManagement · 491ServiceFabric · 468BatchNodeManagement · 457AzureManagedGrafana · 434M365ManagementActivityApi · 429PowerPlatformPlex · 421AzureSecurityCenter · 407AzureActiveDirectory · 404GatewayManager · 388AzureHealthcareAPIs · 387AzureResourceManager · 385M365ManagementActivityApiWebhook · 375MicrosoftContainerRegistry · 373AzureDigitalTwins · 372AzureTrafficManager · 369AzurePortal · 356AzureDataExplorerManagement · 315ActionGroup · 312HDInsight · 298Scuba · 267AzureSpringCloud · 267AzureFrontDoor.Backend · 249StorageSyncService · 237VideoIndexer · 231AzureFrontDoor.Frontend · 229SerialConsole · 222AzureBotService · 206OneDsCollector · 202AzureWebPubSub · 201AzureSignalR · 199AzureUpdateDelivery · 184AzureAdvancedThreatProtection · 182KustoAnalytics · 178AzureDeviceUpdate · 175AzureCognitiveSearch · 169CognitiveServicesFrontend · 150EOPExternalPublishedIPs · 149AzureActiveDirectoryDomainServices · 147AzureInformationProtection · 147AzureDevOps · 147WindowsAdminCenter · 140AutonomousDevelopmentPlatform · 133ChaosStudio · 121Marketplace · 121Dynamics365BusinessCentral · 120AgentFabric · 118SCCservice · 95MicrosoftAzureFluidRelay · 78AzureFrontDoor.FirstParty · 71MicrosoftPurviewPolicyDistribution · 55AzureQuantum · 52AzureOpenDatasets · 50ZeroTrustSegmentation · 48AzureSphere · 40Dynamics365ForMarketingEmail · 39SecurityCopilot · 37AzureDevSpaces · 36MicrosoftDefenderForEndpoint · 34SystemServiceAzureSpringAppsResourceProvider · 32ApplicationInsightsAvailability · 31M365LighthouseProd · 28StorageMover · 24AzureLoadTestingInstanceManagement · 24AzureStack · 23AzureMonitorForSAP · 20AzureDataLake · 19CopilotActions · 17WindowsVirtualDesktop · 7AzureFrontDoor.MicrosoftSecurity · 7Grafana · 1
Sub-lists with a written explanation are described on their own page.
Prefixes
What changed
- 4 Nov 2026
+ 102.133.127.119/32 + 102.133.127.186/31 + 102.133.255.104/29 + 102.133.255.112/30 + 102.37.64.186/31 + 102.37.66.104/30 + 102.37.66.108/31 + 102.37.66.112/30 + 102.37.72.206/31 + 102.37.73.104/30 + 102.37.73.108/31 + 102.37.73.112/30 + 102.37.81.192/27 + 104.208.151.24/31 + 104.208.151.28/30 + 104.208.151.4/30 + 104.208.18.120/30 + 104.208.18.124/32 + 104.208.18.73/32 + 104.208.18.74/31 + 104.208.18.76/30 + 104.208.203.122/31 + 104.208.203.124/30 + 104.208.203.208/28 + 104.208.203.224/29 + 104.208.207.220/30 + 104.208.231.146/31 + 104.211.146.71/32 + 104.211.147.244/30 + 104.211.81.30/31 + 104.214.23.128/29 + 104.214.23.136/32 + 104.40.170.240/30 + 104.40.170.244/31 + 104.40.170.248/30 + 104.40.170.70/31 + 104.45.216.244/32 + 104.45.217.109/32 + 104.45.217.173/32 + 104.45.217.253/32 + 104.45.218.166/32 + 104.45.219.11/32 + 104.46.163.225/32 + 104.46.163.228/30 + 104.46.165.32/31 + 104.46.165.34/32 + 104.46.165.36/30 + 107.32.0.0/11 + 108.143.177.253/32 + 108.143.177.254/31 + 108.143.178.32/29 + 13.117.0.0/16 + 13.118.0.0/15 + 13.123.0.0/16 + 13.240.0.0/14 + 13.66.149.86/31 + 13.66.151.200/30 + 13.66.151.204/32 + 13.67.15.193/32 + 13.67.20.250/31
Allowlist formats
nginx (first 5 prefixes)
allow 102.133.0.0/16; allow 102.133.0.192/32; allow 102.133.0.199/32; allow 102.133.0.212/32; allow 102.133.0.240/28; deny all;
iptables (first 5 prefixes)
iptables -A INPUT -s 102.133.0.0/16 -j ACCEPT iptables -A INPUT -s 102.133.0.192/32 -j ACCEPT iptables -A INPUT -s 102.133.0.199/32 -j ACCEPT iptables -A INPUT -s 102.133.0.212/32 -j ACCEPT iptables -A INPUT -s 102.133.0.240/28 -j ACCEPT
Generate the full list from the CSV, and refresh it on a schedule: providers add and retire prefixes often.
Sources
- Microsoft Azure: published IP ranges · checked 5 Nov 2026
- Microsoft Azure documentation