Sign inMonitor a domain
azure · AzureFrontDoor.MicrosoftSecurity

Microsoft Azure uses 7 prefixes for AzureFrontDoor.MicrosoftSecurity.

Last updated 4 Nov 2026 from Microsoft Azure’s own list (file dated 2026-11-02 (change 425))

Short answer

Microsoft Azure lists these prefixes under “AzureFrontDoor.MicrosoftSecurity”. Microsoft publishes Azure’s ranges weekly as Service Tags: named groups such as AzureCloud, Storage, Sql or AzureFrontDoor.Frontend, each a list of prefixes. We import the global (non-regional) tags.

IPv4 prefixes4
IPv6 prefixes3
Regions in the first 100—
Fetched by peekip4 Nov 2026

Prefixes

PrefixRegion / locationService
13.107.219.0/24—AzureFrontDoor.MicrosoftSecurity
13.107.227.0/24—AzureFrontDoor.MicrosoftSecurity
13.107.228.0/23—AzureFrontDoor.MicrosoftSecurity
150.171.97.0/24—AzureFrontDoor.MicrosoftSecurity
2620:1ec:40::/48—AzureFrontDoor.MicrosoftSecurity
2620:1ec:49::/48—AzureFrontDoor.MicrosoftSecurity
2620:1ec:4a::/47—AzureFrontDoor.MicrosoftSecurity
Showing 7 of 7 prefixes All prefixes (CSV)

What changed

No prefixes added or removed since we started tracking this list. Changes appear here the day after the provider publishes them.

Allowlist formats

nginx (first 5 prefixes)
allow 13.107.219.0/24;
allow 13.107.227.0/24;
allow 13.107.228.0/23;
allow 150.171.97.0/24;
allow 2620:1ec:40::/48;
deny all;
iptables (first 5 prefixes)
iptables -A INPUT -s 13.107.219.0/24 -j ACCEPT
iptables -A INPUT -s 13.107.227.0/24 -j ACCEPT
iptables -A INPUT -s 13.107.228.0/23 -j ACCEPT
iptables -A INPUT -s 150.171.97.0/24 -j ACCEPT
ip6tables -A INPUT -s 2620:1ec:40::/48 -j ACCEPT

Generate the full list from the CSV, and refresh it on a schedule: providers add and retire prefixes often.

Sources

  1. Microsoft Azure: published IP ranges · checked 4 Nov 2026
  2. Microsoft Azure documentation