Microsoft Azure uses 118 prefixes for AgentFabric.
Short answer
Microsoft Azure lists these prefixes under “AgentFabric”. Microsoft publishes Azure’s ranges weekly as Service Tags: named groups such as AzureCloud, Storage, Sql or AzureFrontDoor.Frontend, each a list of prefixes. We import the global (non-regional) tags.
Prefixes
What changed
- 4 Nov 2026
+ 102.37.81.192/27 + 132.164.135.192/27 + 145.191.169.128/27 + 158.158.215.192/27 + 158.23.103.224/27 + 172.165.52.32/27 + 172.180.75.64/27 + 172.186.27.64/27 + 172.192.228.0/27 + 172.196.120.128/27 + 172.198.247.224/27 + 172.215.188.64/27 + 20.17.120.160/27 + 20.215.168.0/27 + 20.40.201.192/27 + 20.43.43.64/27 + 20.49.98.64/27 + 20.53.57.96/27 + 20.66.227.0/27 + 2603:1000:104:f::160/123 + 2603:1000:4:a::180/123 + 2603:1010:101:9::480/123 + 2603:1010:304:f::40/123 + 2603:1010:404:a::280/123 + 2603:1010:502:8::2e0/123 + 2603:1010:6:17::2e0/123 + 2603:1020:1004:14::580/123 + 2603:1020:104:a::580/123 + 2603:1020:1204:b::5a0/123 + 2603:1020:1302:c::680/123 + 2603:1020:1403:a::600/123 + 2603:1020:1502:7::300/123 + 2603:1020:1602:7::720/123 + 2603:1020:206:2e::6c0/123 + 2603:1020:5:26::100/123 + 2603:1020:605:f::520/123 + 2603:1020:705:1e::40/123 + 2603:1020:805:13::500/123 + 2603:1020:905:c::640/123 + 2603:1020:a04:10::e0/123 + 2603:1020:b04:c::e0/123 + 2603:1020:c04:11::340/123 + 2603:1020:d04:c::480/123 + 2603:1020:e04:f::200/123 + 2603:1020:f04:b::700/123 + 2603:1030:1005:10::1c0/123 + 2603:1030:10:2b::400/123 + 2603:1030:210:40::100/123 + 2603:1030:40b:18::2c0/123 + 2603:1030:40c:35::2a0/123 + 2603:1030:504:1e::100/123 + 2603:1030:608:1b::c0/123 + 2603:1030:702:a::760/123 + 2603:1030:807:20::100/123 + 2603:1030:a07:2d::600/123 + 2603:1030:b04:14::380/123 + 2603:1030:c06:2c::440/123 + 2603:1030:f05:14::4a0/123 + 2603:1030:f:15::5a0/123 + 2603:1040:1002:c::e0/123
Allowlist formats
nginx (first 5 prefixes)
allow 102.37.81.192/27; allow 132.164.135.192/27; allow 145.191.169.128/27; allow 158.158.215.192/27; allow 158.23.103.224/27; deny all;
iptables (first 5 prefixes)
iptables -A INPUT -s 102.37.81.192/27 -j ACCEPT iptables -A INPUT -s 132.164.135.192/27 -j ACCEPT iptables -A INPUT -s 145.191.169.128/27 -j ACCEPT iptables -A INPUT -s 158.158.215.192/27 -j ACCEPT iptables -A INPUT -s 158.23.103.224/27 -j ACCEPT
Generate the full list from the CSV, and refresh it on a schedule: providers add and retire prefixes often.
Sources
- Microsoft Azure: published IP ranges · checked 4 Nov 2026
- Microsoft Azure documentation