Sign inMonitor a domain
azure · AzureActiveDirectoryDomainServices

Microsoft Azure uses 147 prefixes for AzureActiveDirectoryDomainServices.

Last updated 5 Nov 2026 from Microsoft Azure’s own list (file dated 2026-11-02 (change 425))

Short answer

Microsoft Azure lists these prefixes under “AzureActiveDirectoryDomainServices”. Microsoft publishes Azure’s ranges weekly as Service Tags: named groups such as AzureCloud, Storage, Sql or AzureFrontDoor.Frontend, each a list of prefixes. We import the global (non-regional) tags.

IPv4 prefixes100
IPv6 prefixes47
Regions in the first 100—
Fetched by peekip5 Nov 2026

Prefixes

PrefixRegion / locationService
104.211.147.160/27—AzureActiveDirectoryDomainServices
104.40.156.18/32—AzureActiveDirectoryDomainServices
104.40.84.19/32—AzureActiveDirectoryDomainServices
104.40.87.209/32—AzureActiveDirectoryDomainServices
104.41.159.212/32—AzureActiveDirectoryDomainServices
104.45.138.161/32—AzureActiveDirectoryDomainServices
104.46.178.128/27—AzureActiveDirectoryDomainServices
13.64.151.161/32—AzureActiveDirectoryDomainServices
13.66.141.64/27—AzureActiveDirectoryDomainServices
13.67.9.224/27—AzureActiveDirectoryDomainServices
13.69.229.96/27—AzureActiveDirectoryDomainServices
13.69.66.160/27—AzureActiveDirectoryDomainServices
13.70.73.32/27—AzureActiveDirectoryDomainServices
13.71.172.160/27—AzureActiveDirectoryDomainServices
13.71.195.224/27—AzureActiveDirectoryDomainServices
13.73.240.32/27—AzureActiveDirectoryDomainServices
13.74.249.156/32—AzureActiveDirectoryDomainServices
13.75.105.168/32—AzureActiveDirectoryDomainServices
13.75.38.32/27—AzureActiveDirectoryDomainServices
13.77.52.160/27—AzureActiveDirectoryDomainServices
13.78.108.192/27—AzureActiveDirectoryDomainServices
13.78.172.246/32—AzureActiveDirectoryDomainServices
13.79.37.247/32—AzureActiveDirectoryDomainServices
13.86.219.0/27—AzureActiveDirectoryDomainServices
13.87.32.18/32—AzureActiveDirectoryDomainServices
13.87.33.25/32—AzureActiveDirectoryDomainServices
13.89.174.0/27—AzureActiveDirectoryDomainServices
191.233.204.160/27—AzureActiveDirectoryDomainServices
20.187.197.32/27—AzureActiveDirectoryDomainServices
20.190.165.48/29—AzureActiveDirectoryDomainServices
20.190.166.112/29—AzureActiveDirectoryDomainServices
20.190.166.176/29—AzureActiveDirectoryDomainServices
20.190.166.48/29—AzureActiveDirectoryDomainServices
20.195.56.102/32—AzureActiveDirectoryDomainServices
20.195.57.118/32—AzureActiveDirectoryDomainServices
20.195.64.192/27—AzureActiveDirectoryDomainServices
20.36.107.192/27—AzureActiveDirectoryDomainServices
20.36.115.64/27—AzureActiveDirectoryDomainServices
20.37.75.96/27—AzureActiveDirectoryDomainServices
20.43.120.32/27—AzureActiveDirectoryDomainServices
20.44.16.32/27—AzureActiveDirectoryDomainServices
20.44.3.160/27—AzureActiveDirectoryDomainServices
20.46.10.64/27—AzureActiveDirectoryDomainServices
20.51.16.128/27—AzureActiveDirectoryDomainServices
20.61.98.160/27—AzureActiveDirectoryDomainServices
20.62.129.0/27—AzureActiveDirectoryDomainServices
20.66.2.32/27—AzureActiveDirectoryDomainServices
20.72.21.64/27—AzureActiveDirectoryDomainServices
23.101.0.70/32—AzureActiveDirectoryDomainServices
23.101.6.190/32—AzureActiveDirectoryDomainServices
Showing 50 of 147 prefixes All prefixes (CSV)

What changed

  • 30 Oct 2026
    + 2603:1027:1:1c0::100/124
+ 2603:1027:1:40::/124
  • 21 Oct 2026
    + 2603:1016:1400:20::100/123
+ 2603:1016:1400:40::100/123
+ 2603:1016:1400::180/124
+ 2603:1026:3000:100::120/123
+ 2603:1026:3000:140::140/124
+ 2603:1026:3000:1a0::120/123
+ 2603:1026:3000:200::100/123
+ 2603:1026:3000:c0::140/124
+ 2603:1026:3000:c0::160/124
+ 2603:1026:3000:e0::100/123
+ 2603:1036:3000:100::120/123
+ 2603:1036:3000:120::130/124
+ 2603:1036:3000:140::120/123
+ 2603:1036:3000:160::100/124
+ 2603:1036:3000:180::100/124
+ 2603:1036:3000:1c0::140/124
+ 2603:1036:3000:20::100/124
+ 2603:1036:3000:40::100/123
+ 2603:1036:3000:60::200/123
+ 2603:1036:3000:80::100/123
+ 2603:1036:3000::120/123
+ 2603:1036:3000:c0::240/123
+ 2603:1046:2000:100::140/123
+ 2603:1046:2000:120::100/123
+ 2603:1046:2000:160::120/123
+ 2603:1046:2000:180::220/123
+ 2603:1046:2000:20::100/123
+ 2603:1046:2000:40::160/123
+ 2603:1046:2000:60::100/123
+ 2603:1046:2000:80::100/123
+ 2603:1046:2000:e0::100/123
+ 2603:1056:2000:20::100/123

Allowlist formats

nginx (first 5 prefixes)
allow 104.211.147.160/27;
allow 104.40.156.18/32;
allow 104.40.84.19/32;
allow 104.40.87.209/32;
allow 104.41.159.212/32;
deny all;
iptables (first 5 prefixes)
iptables -A INPUT -s 104.211.147.160/27 -j ACCEPT
iptables -A INPUT -s 104.40.156.18/32 -j ACCEPT
iptables -A INPUT -s 104.40.84.19/32 -j ACCEPT
iptables -A INPUT -s 104.40.87.209/32 -j ACCEPT
iptables -A INPUT -s 104.41.159.212/32 -j ACCEPT

Generate the full list from the CSV, and refresh it on a schedule: providers add and retire prefixes often.

Sources

  1. Microsoft Azure: published IP ranges · checked 5 Nov 2026
  2. Microsoft Azure documentation