Microsoft Azure uses 71 prefixes for AzureFrontDoor.FirstParty.
Short answer
Microsoft Azure lists these prefixes under “AzureFrontDoor.FirstParty”. Microsoft publishes Azure’s ranges weekly as Service Tags: named groups such as AzureCloud, Storage, Sql or AzureFrontDoor.Frontend, each a list of prefixes. We import the global (non-regional) tags.
Prefixes
What changed
- 30 Oct 2026
+ 2603:1061:13e0::/44 + 52.107.220.0/22
Allowlist formats
nginx (first 5 prefixes)
allow 13.107.12.0/23; allow 13.107.128.0/19; allow 13.107.15.0/24; allow 13.107.16.0/24; allow 13.107.18.0/23; deny all;
iptables (first 5 prefixes)
iptables -A INPUT -s 13.107.12.0/23 -j ACCEPT iptables -A INPUT -s 13.107.128.0/19 -j ACCEPT iptables -A INPUT -s 13.107.15.0/24 -j ACCEPT iptables -A INPUT -s 13.107.16.0/24 -j ACCEPT iptables -A INPUT -s 13.107.18.0/23 -j ACCEPT
Generate the full list from the CSV, and refresh it on a schedule: providers add and retire prefixes often.
Sources
- Microsoft Azure: published IP ranges · checked 4 Nov 2026
- Microsoft Azure documentation