Sign inMonitor a domain
azure · AzureAdvancedThreatProtection

Microsoft Azure uses 182 prefixes for AzureAdvancedThreatProtection.

Last updated 4 Nov 2026 from Microsoft Azure’s own list (file dated 2026-11-02 (change 425))

Short answer

Microsoft Azure lists these prefixes under “AzureAdvancedThreatProtection”. Microsoft publishes Azure’s ranges weekly as Service Tags: named groups such as AzureCloud, Storage, Sql or AzureFrontDoor.Frontend, each a list of prefixes. We import the global (non-regional) tags.

IPv4 prefixes101
IPv6 prefixes81
Regions in the first 100—
Fetched by peekip4 Nov 2026

Prefixes

PrefixRegion / locationService
13.87.32.4/32—AzureAdvancedThreatProtection
130.213.133.250/31—AzureAdvancedThreatProtection
130.213.133.252/30—AzureAdvancedThreatProtection
134.138.64.24/29—AzureAdvancedThreatProtection
135.18.128.96/32—AzureAdvancedThreatProtection
158.23.96.24/29—AzureAdvancedThreatProtection
172.129.72.24/29—AzureAdvancedThreatProtection
172.186.108.172/30—AzureAdvancedThreatProtection
172.186.108.176/32—AzureAdvancedThreatProtection
172.194.64.24/29—AzureAdvancedThreatProtection
172.198.80.24/29—AzureAdvancedThreatProtection
172.204.152.24/29—AzureAdvancedThreatProtection
191.233.8.24/29—AzureAdvancedThreatProtection
191.235.225.136/29—AzureAdvancedThreatProtection
20.113.248.104/29—AzureAdvancedThreatProtection
20.15.211.234/31—AzureAdvancedThreatProtection
20.15.211.248/29—AzureAdvancedThreatProtection
20.150.160.112/29—AzureAdvancedThreatProtection
20.17.112.24/29—AzureAdvancedThreatProtection
20.17.48.24/29—AzureAdvancedThreatProtection
20.189.106.120/29—AzureAdvancedThreatProtection
20.192.160.24/29—AzureAdvancedThreatProtection
20.192.225.16/29—AzureAdvancedThreatProtection
20.195.69.80/29—AzureAdvancedThreatProtection
20.21.32.24/29—AzureAdvancedThreatProtection
20.215.0.24/29—AzureAdvancedThreatProtection
20.217.248.24/29—AzureAdvancedThreatProtection
20.217.40.24/29—AzureAdvancedThreatProtection
20.36.120.112/29—AzureAdvancedThreatProtection
20.37.156.192/29—AzureAdvancedThreatProtection
20.37.195.8/29—AzureAdvancedThreatProtection
20.37.224.112/29—AzureAdvancedThreatProtection
20.37.64.112/29—AzureAdvancedThreatProtection
20.38.136.112/29—AzureAdvancedThreatProtection
20.38.84.96/29—AzureAdvancedThreatProtection
20.39.11.16/29—AzureAdvancedThreatProtection
20.41.192.112/29—AzureAdvancedThreatProtection
20.41.4.96/29—AzureAdvancedThreatProtection
20.41.65.128/29—AzureAdvancedThreatProtection
20.42.129.176/29—AzureAdvancedThreatProtection
20.42.224.112/29—AzureAdvancedThreatProtection
20.42.4.192/29—AzureAdvancedThreatProtection
20.43.130.88/29—AzureAdvancedThreatProtection
20.43.41.144/29—AzureAdvancedThreatProtection
20.43.65.136/29—AzureAdvancedThreatProtection
20.45.112.112/29—AzureAdvancedThreatProtection
20.45.192.112/29—AzureAdvancedThreatProtection
20.51.14.64/29—AzureAdvancedThreatProtection
20.62.135.224/29—AzureAdvancedThreatProtection
20.66.6.80/29—AzureAdvancedThreatProtection
Showing 50 of 182 prefixes All prefixes (CSV)

What changed

No prefixes added or removed since we started tracking this list. Changes appear here the day after the provider publishes them.

Allowlist formats

nginx (first 5 prefixes)
allow 13.87.32.4/32;
allow 130.213.133.250/31;
allow 130.213.133.252/30;
allow 134.138.64.24/29;
allow 135.18.128.96/32;
deny all;
iptables (first 5 prefixes)
iptables -A INPUT -s 13.87.32.4/32 -j ACCEPT
iptables -A INPUT -s 130.213.133.250/31 -j ACCEPT
iptables -A INPUT -s 130.213.133.252/30 -j ACCEPT
iptables -A INPUT -s 134.138.64.24/29 -j ACCEPT
iptables -A INPUT -s 135.18.128.96/32 -j ACCEPT

Generate the full list from the CSV, and refresh it on a schedule: providers add and retire prefixes often.

Sources

  1. Microsoft Azure: published IP ranges · checked 4 Nov 2026
  2. Microsoft Azure documentation