Microsoft Azure uses 589 prefixes for AzureArcInfrastructure.
Short answer
Microsoft Azure lists these prefixes under “AzureArcInfrastructure”. Microsoft publishes Azure’s ranges weekly as Service Tags: named groups such as AzureCloud, Storage, Sql or AzureFrontDoor.Frontend, each a list of prefixes. We import the global (non-regional) tags.
Prefixes
What changed
- 30 Oct 2026
+ 51.53.51.228/31 + 70.157.200.40/29
- 21 Oct 2026
+ 2603:1040:1a02:7::1cf/128 + 2603:1040:1a02:7::3bc/126 + 2603:1040:1b02:6::513/128 + 2603:1040:1b02:6::658/126 + 48.197.153.169/32 + 48.197.157.196/30 + 48.198.203.34/32 + 48.198.203.36/30
Allowlist formats
nginx (first 5 prefixes)
allow 102.133.127.176/31; allow 102.133.154.6/31; allow 102.133.218.52/30; allow 102.133.219.188/30; allow 102.133.254.200/30; deny all;
iptables (first 5 prefixes)
iptables -A INPUT -s 102.133.127.176/31 -j ACCEPT iptables -A INPUT -s 102.133.154.6/31 -j ACCEPT iptables -A INPUT -s 102.133.218.52/30 -j ACCEPT iptables -A INPUT -s 102.133.219.188/30 -j ACCEPT iptables -A INPUT -s 102.133.254.200/30 -j ACCEPT
Generate the full list from the CSV, and refresh it on a schedule: providers add and retire prefixes often.
Sources
- Microsoft Azure: published IP ranges · checked 5 Nov 2026
- Microsoft Azure documentation