Sign inMonitor a domain
azure · AzureActiveDirectory

Microsoft Azure uses 404 prefixes for AzureActiveDirectory.

Last updated 5 Nov 2026 from Microsoft Azure’s own list (file dated 2026-11-02 (change 425))

Short answer

AzureActiveDirectory covers Microsoft Entra ID (formerly Azure AD) sign-in endpoints.

IPv4 prefixes311
IPv6 prefixes93
Regions in the first 100—
Fetched by peekip5 Nov 2026

Prefixes

PrefixRegion / locationService
104.208.18.96/28—AzureActiveDirectory
104.211.147.160/27—AzureActiveDirectory
104.40.156.18/32—AzureActiveDirectory
104.40.168.0/26—AzureActiveDirectory
104.40.170.224/28—AzureActiveDirectory
104.40.84.19/32—AzureActiveDirectory
104.40.87.209/32—AzureActiveDirectory
104.41.159.212/32—AzureActiveDirectory
104.45.138.161/32—AzureActiveDirectory
104.46.178.128/27—AzureActiveDirectory
13.64.151.161/32—AzureActiveDirectory
13.66.141.64/27—AzureActiveDirectory
13.66.150.240/28—AzureActiveDirectory
13.67.21.96/27—AzureActiveDirectory
13.67.9.224/27—AzureActiveDirectory
13.69.119.208/28—AzureActiveDirectory
13.69.229.96/27—AzureActiveDirectory
13.69.66.160/27—AzureActiveDirectory
13.70.73.32/27—AzureActiveDirectory
13.71.172.160/27—AzureActiveDirectory
13.71.195.224/27—AzureActiveDirectory
13.71.201.64/26—AzureActiveDirectory
13.73.240.32/27—AzureActiveDirectory
13.74.104.0/26—AzureActiveDirectory
13.74.203.80/28—AzureActiveDirectory
13.74.249.156/32—AzureActiveDirectory
13.75.105.168/32—AzureActiveDirectory
13.75.38.32/27—AzureActiveDirectory
13.77.52.160/27—AzureActiveDirectory
13.78.108.192/27—AzureActiveDirectory
13.78.172.246/32—AzureActiveDirectory
13.79.37.247/32—AzureActiveDirectory
13.86.219.0/27—AzureActiveDirectory
13.87.32.18/32—AzureActiveDirectory
13.87.32.5/32—AzureActiveDirectory
13.87.33.25/32—AzureActiveDirectory
13.87.33.28/32—AzureActiveDirectory
13.89.174.0/27—AzureActiveDirectory
135.225.177.112/28—AzureActiveDirectory
145.191.168.32/28—AzureActiveDirectory
158.158.214.192/28—AzureActiveDirectory
168.61.245.72/29—AzureActiveDirectory
172.161.230.192/28—AzureActiveDirectory
172.165.36.192/28—AzureActiveDirectory
172.172.255.96/28—AzureActiveDirectory
172.173.10.80/28—AzureActiveDirectory
172.173.16.112/28—AzureActiveDirectory
172.173.24.112/28—AzureActiveDirectory
172.181.56.192/28—AzureActiveDirectory
172.181.58.0/26—AzureActiveDirectory
Showing 50 of 404 prefixes All prefixes (CSV)

What changed

No prefixes added or removed since we started tracking this list. Changes appear here the day after the provider publishes them.

Allowlist formats

nginx (first 5 prefixes)
allow 104.208.18.96/28;
allow 104.211.147.160/27;
allow 104.40.156.18/32;
allow 104.40.168.0/26;
allow 104.40.170.224/28;
deny all;
iptables (first 5 prefixes)
iptables -A INPUT -s 104.208.18.96/28 -j ACCEPT
iptables -A INPUT -s 104.211.147.160/27 -j ACCEPT
iptables -A INPUT -s 104.40.156.18/32 -j ACCEPT
iptables -A INPUT -s 104.40.168.0/26 -j ACCEPT
iptables -A INPUT -s 104.40.170.224/28 -j ACCEPT

Generate the full list from the CSV, and refresh it on a schedule: providers add and retire prefixes often.

Sources

  1. Microsoft Azure: published IP ranges · checked 5 Nov 2026
  2. Microsoft Azure documentation