azure

Microsoft Azure publishes 54,122 IP ranges.

Short answer

Microsoft publishes Azure’s ranges weekly as Service Tags: named groups such as AzureCloud, Storage, Sql or AzureFrontDoor.Frontend, each a list of prefixes. We import the global (non-regional) tags.

IPv4 prefixes38,107
IPv6 prefixes16,015
Sub-lists107
Provider’s file date2026-11-02 (change 425)
Fetched by peekip5 Nov 2026
StatusFetched OK

What it’s for

Use the tags to write firewall or network security group rules for a service instead of hard-coding addresses.

Sub-lists

AzureCloud · 4948AzureMonitor · 3187MicrosoftCloudAppSecurity · 2299LogicApps · 1921PowerPlatformInfra · 1522Sql · 1517CognitiveServicesManagement · 1511AppService · 1298AzureSiteRecovery · 1292AzureActiveDirectory.ServiceEndpoint · 1287AzureContainerRegistry · 1210AzureMonitor.Core · 1056DataFactory · 1002PowerBI · 939GuestAndHybridManagement · 907SqlManagement · 870LogicAppsManagement · 824AzureIoTHub · 814AzureMachineLearning · 809AzureCosmosDB · 801Windows365 · 754AppConfiguration · 737AzureKeyVault · 717ServiceBus · 711DataFactoryManagement · 694EventHub · 663AzureAttestation · 657AzureDatabricks · 656PowerQueryOnline · 655AzureMachineLearningInference · 633AzureConnectors · 610AzureEventGrid · 606AzureBackup · 594AzureArcInfrastructure · 589Storage · 576AzureSentinel · 541AppServiceManagement · 515ApiManagement · 491ServiceFabric · 468BatchNodeManagement · 457AzureManagedGrafana · 434M365ManagementActivityApi · 429PowerPlatformPlex · 421AzureSecurityCenter · 407AzureActiveDirectory · 404GatewayManager · 388AzureHealthcareAPIs · 387AzureResourceManager · 385M365ManagementActivityApiWebhook · 375MicrosoftContainerRegistry · 373AzureDigitalTwins · 372AzureTrafficManager · 369AzurePortal · 356AzureDataExplorerManagement · 315ActionGroup · 312HDInsight · 298Scuba · 267AzureSpringCloud · 267AzureFrontDoor.Backend · 249StorageSyncService · 237VideoIndexer · 231AzureFrontDoor.Frontend · 229SerialConsole · 222AzureBotService · 206OneDsCollector · 202AzureWebPubSub · 201AzureSignalR · 199AzureUpdateDelivery · 184AzureAdvancedThreatProtection · 182KustoAnalytics · 178AzureDeviceUpdate · 175AzureCognitiveSearch · 169CognitiveServicesFrontend · 150EOPExternalPublishedIPs · 149AzureActiveDirectoryDomainServices · 147AzureInformationProtection · 147AzureDevOps · 147WindowsAdminCenter · 140AutonomousDevelopmentPlatform · 133ChaosStudio · 121Marketplace · 121Dynamics365BusinessCentral · 120AgentFabric · 118SCCservice · 95MicrosoftAzureFluidRelay · 78AzureFrontDoor.FirstParty · 71MicrosoftPurviewPolicyDistribution · 55AzureQuantum · 52AzureOpenDatasets · 50ZeroTrustSegmentation · 48AzureSphere · 40Dynamics365ForMarketingEmail · 39SecurityCopilot · 37AzureDevSpaces · 36MicrosoftDefenderForEndpoint · 34SystemServiceAzureSpringAppsResourceProvider · 32ApplicationInsightsAvailability · 31M365LighthouseProd · 28StorageMover · 24AzureLoadTestingInstanceManagement · 24AzureStack · 23AzureMonitorForSAP · 20AzureDataLake · 19CopilotActions · 17WindowsVirtualDesktop · 7AzureFrontDoor.MicrosoftSecurity · 7Grafana · 1

Sub-lists with a written explanation are described on their own page.

Prefixes

PrefixRegion / locationService
102.133.0.0/16—AzureCloud
102.133.0.192/32—AzureDataExplorerManagement
102.133.0.199/32—PowerPlatformInfra
102.133.0.212/32—PowerPlatformInfra
102.133.0.240/28—AzureEventGrid
102.133.0.79/32—ApiManagement
102.133.1.0/28—AzureEventGrid
102.133.1.24/32—PowerPlatformInfra
102.133.101.220/32—LogicApps
102.133.120.0/27—Sql
102.133.120.32/29—Sql
102.133.121.0/27—Sql
102.133.122.0/26—AzureCosmosDB
102.133.122.128/29—ServiceBus
102.133.122.136/29—MicrosoftContainerRegistry
102.133.122.144/29—AzureContainerRegistry
102.133.122.152/29—AzureMonitor
102.133.122.160/27—AppService
102.133.122.192/27—SqlManagement
102.133.122.224/27—AzureMachineLearning
102.133.122.64/26—EventHub
102.133.123.192/27—SqlManagement
102.133.123.224/28—AzureResourceManager
102.133.123.240/29—AzureMonitor
102.133.123.248/29—CognitiveServicesManagement
102.133.123.64/27—BatchNodeManagement
102.133.123.96/27—AzureBackup
102.133.124.0/29—HDInsight
102.133.124.104/29—DataFactory
102.133.124.104/29—DataFactoryManagement
102.133.124.112/28—AppConfiguration
102.133.124.12/31—AzureHealthcareAPIs
102.133.124.128/29—AppConfiguration
102.133.124.14/31—M365ManagementActivityApi
102.133.124.140/30—AzureKeyVault
102.133.124.144/29—SCCservice
102.133.124.152/29—M365ManagementActivityApiWebhook
102.133.124.16/29—GuestAndHybridManagement
102.133.124.160/27—AzureSecurityCenter
102.133.124.192/26—AzureContainerRegistry
102.133.124.24/29—CognitiveServicesManagement
102.133.124.32/27—AzureIoTHub
102.133.124.64/28—AzureSiteRecovery
102.133.124.8/30—AzureBotService
102.133.124.80/29—AppConfiguration
102.133.124.88/29—CognitiveServicesManagement
102.133.124.96/29—CognitiveServicesManagement
102.133.126.0/26—AzureContainerRegistry
102.133.126.132/30—AzureAttestation
102.133.126.144/30—ServiceFabric
Showing 50 of 54,122 prefixes All prefixes (CSV)

What changed

  • 4 Nov 2026
    + 102.133.127.119/32
    + 102.133.127.186/31
    + 102.133.255.104/29
    + 102.133.255.112/30
    + 102.37.64.186/31
    + 102.37.66.104/30
    + 102.37.66.108/31
    + 102.37.66.112/30
    + 102.37.72.206/31
    + 102.37.73.104/30
    + 102.37.73.108/31
    + 102.37.73.112/30
    + 102.37.81.192/27
    + 104.208.151.24/31
    + 104.208.151.28/30
    + 104.208.151.4/30
    + 104.208.18.120/30
    + 104.208.18.124/32
    + 104.208.18.73/32
    + 104.208.18.74/31
    + 104.208.18.76/30
    + 104.208.203.122/31
    + 104.208.203.124/30
    + 104.208.203.208/28
    + 104.208.203.224/29
    + 104.208.207.220/30
    + 104.208.231.146/31
    + 104.211.146.71/32
    + 104.211.147.244/30
    + 104.211.81.30/31
    + 104.214.23.128/29
    + 104.214.23.136/32
    + 104.40.170.240/30
    + 104.40.170.244/31
    + 104.40.170.248/30
    + 104.40.170.70/31
    + 104.45.216.244/32
    + 104.45.217.109/32
    + 104.45.217.173/32
    + 104.45.217.253/32
    + 104.45.218.166/32
    + 104.45.219.11/32
    + 104.46.163.225/32
    + 104.46.163.228/30
    + 104.46.165.32/31
    + 104.46.165.34/32
    + 104.46.165.36/30
    + 107.32.0.0/11
    + 108.143.177.253/32
    + 108.143.177.254/31
    + 108.143.178.32/29
    + 13.117.0.0/16
    + 13.118.0.0/15
    + 13.123.0.0/16
    + 13.240.0.0/14
    + 13.66.149.86/31
    + 13.66.151.200/30
    + 13.66.151.204/32
    + 13.67.15.193/32
    + 13.67.20.250/31
    

Allowlist formats

nginx (first 5 prefixes)
allow 102.133.0.0/16;
allow 102.133.0.192/32;
allow 102.133.0.199/32;
allow 102.133.0.212/32;
allow 102.133.0.240/28;
deny all;
iptables (first 5 prefixes)
iptables -A INPUT -s 102.133.0.0/16 -j ACCEPT
iptables -A INPUT -s 102.133.0.192/32 -j ACCEPT
iptables -A INPUT -s 102.133.0.199/32 -j ACCEPT
iptables -A INPUT -s 102.133.0.212/32 -j ACCEPT
iptables -A INPUT -s 102.133.0.240/28 -j ACCEPT

Generate the full list from the CSV, and refresh it on a schedule: providers add and retire prefixes often.

Sources

  1. Microsoft Azure: published IP ranges · checked 5 Nov 2026
  2. Microsoft Azure documentation