azure · AzureActiveDirectory.ServiceEndpoint

Microsoft Azure uses 1,287 prefixes for AzureActiveDirectory.ServiceEndpoint.

Short answer

Microsoft Azure lists these prefixes under “AzureActiveDirectory.ServiceEndpoint”. Microsoft publishes Azure’s ranges weekly as Service Tags: named groups such as AzureCloud, Storage, Sql or AzureFrontDoor.Frontend, each a list of prefixes. We import the global (non-regional) tags.

IPv4 prefixes848
IPv6 prefixes439
Regions in the first 100—
Fetched by peekip4 Nov 2026

Prefixes

PrefixRegion / locationService
13.87.33.28/32—AzureActiveDirectory.ServiceEndpoint
20.190.128.0/26—AzureActiveDirectory.ServiceEndpoint
20.190.128.128/27—AzureActiveDirectory.ServiceEndpoint
20.190.128.160/29—AzureActiveDirectory.ServiceEndpoint
20.190.128.64/28—AzureActiveDirectory.ServiceEndpoint
20.190.129.0/26—AzureActiveDirectory.ServiceEndpoint
20.190.129.128/27—AzureActiveDirectory.ServiceEndpoint
20.190.129.64/28—AzureActiveDirectory.ServiceEndpoint
20.190.130.0/27—AzureActiveDirectory.ServiceEndpoint
20.190.131.0/27—AzureActiveDirectory.ServiceEndpoint
20.190.131.32/29—AzureActiveDirectory.ServiceEndpoint
20.190.131.64/27—AzureActiveDirectory.ServiceEndpoint
20.190.132.0/27—AzureActiveDirectory.ServiceEndpoint
20.190.132.32/29—AzureActiveDirectory.ServiceEndpoint
20.190.132.64/27—AzureActiveDirectory.ServiceEndpoint
20.190.132.96/29—AzureActiveDirectory.ServiceEndpoint
20.190.133.0/27—AzureActiveDirectory.ServiceEndpoint
20.190.133.32/29—AzureActiveDirectory.ServiceEndpoint
20.190.133.64/27—AzureActiveDirectory.ServiceEndpoint
20.190.134.0/27—AzureActiveDirectory.ServiceEndpoint
20.190.134.32/29—AzureActiveDirectory.ServiceEndpoint
20.190.134.64/27—AzureActiveDirectory.ServiceEndpoint
20.190.135.0/27—AzureActiveDirectory.ServiceEndpoint
20.190.135.32/29—AzureActiveDirectory.ServiceEndpoint
20.190.135.64/27—AzureActiveDirectory.ServiceEndpoint
20.190.135.96/29—AzureActiveDirectory.ServiceEndpoint
20.190.136.0/27—AzureActiveDirectory.ServiceEndpoint
20.190.136.32/29—AzureActiveDirectory.ServiceEndpoint
20.190.137.0/27—AzureActiveDirectory.ServiceEndpoint
20.190.137.32/29—AzureActiveDirectory.ServiceEndpoint
20.190.137.64/27—AzureActiveDirectory.ServiceEndpoint
20.190.138.0/27—AzureActiveDirectory.ServiceEndpoint
20.190.138.32/29—AzureActiveDirectory.ServiceEndpoint
20.190.138.64/27—AzureActiveDirectory.ServiceEndpoint
20.190.138.96/29—AzureActiveDirectory.ServiceEndpoint
20.190.139.0/27—AzureActiveDirectory.ServiceEndpoint
20.190.139.128/27—AzureActiveDirectory.ServiceEndpoint
20.190.139.160/29—AzureActiveDirectory.ServiceEndpoint
20.190.139.32/29—AzureActiveDirectory.ServiceEndpoint
20.190.139.64/27—AzureActiveDirectory.ServiceEndpoint
20.190.139.96/29—AzureActiveDirectory.ServiceEndpoint
20.190.140.0/27—AzureActiveDirectory.ServiceEndpoint
20.190.140.128/27—AzureActiveDirectory.ServiceEndpoint
20.190.140.160/29—AzureActiveDirectory.ServiceEndpoint
20.190.140.192/27—AzureActiveDirectory.ServiceEndpoint
20.190.140.224/29—AzureActiveDirectory.ServiceEndpoint
20.190.140.64/27—AzureActiveDirectory.ServiceEndpoint
20.190.140.96/29—AzureActiveDirectory.ServiceEndpoint
20.190.141.0/27—AzureActiveDirectory.ServiceEndpoint
20.190.141.128/27—AzureActiveDirectory.ServiceEndpoint
Showing 50 of 1,287 prefixes All prefixes (CSV)

What changed

  • 30 Oct 2026
    + 2603:1027:1:40::40/122
    

Allowlist formats

nginx (first 5 prefixes)
allow 13.87.33.28/32;
allow 20.190.128.0/26;
allow 20.190.128.128/27;
allow 20.190.128.160/29;
allow 20.190.128.64/28;
deny all;
iptables (first 5 prefixes)
iptables -A INPUT -s 13.87.33.28/32 -j ACCEPT
iptables -A INPUT -s 20.190.128.0/26 -j ACCEPT
iptables -A INPUT -s 20.190.128.128/27 -j ACCEPT
iptables -A INPUT -s 20.190.128.160/29 -j ACCEPT
iptables -A INPUT -s 20.190.128.64/28 -j ACCEPT

Generate the full list from the CSV, and refresh it on a schedule: providers add and retire prefixes often.

Sources

  1. Microsoft Azure: published IP ranges · checked 4 Nov 2026
  2. Microsoft Azure documentation