Microsoft Azure uses 385 prefixes for AzureResourceManager.
Short answer
Microsoft Azure lists these prefixes under “AzureResourceManager”. Microsoft publishes Azure’s ranges weekly as Service Tags: named groups such as AzureCloud, Storage, Sql or AzureFrontDoor.Frontend, each a list of prefixes. We import the global (non-regional) tags.
Prefixes
What changed
- 16 Oct 2026
+ 2603:1030:40b:1400::62/127 + 2603:1030:807:1400::1c/127 + 2603:1030:f:800::4a/127 + 48.223.123.172/31 + 57.173.25.10/31 + 74.145.160.112/31
Allowlist formats
nginx (first 5 prefixes)
allow 102.133.123.224/28; allow 102.133.158.0/23; allow 102.133.222.0/23; allow 102.133.28.16/28; allow 102.133.30.0/23; deny all;
iptables (first 5 prefixes)
iptables -A INPUT -s 102.133.123.224/28 -j ACCEPT iptables -A INPUT -s 102.133.158.0/23 -j ACCEPT iptables -A INPUT -s 102.133.222.0/23 -j ACCEPT iptables -A INPUT -s 102.133.28.16/28 -j ACCEPT iptables -A INPUT -s 102.133.30.0/23 -j ACCEPT
Generate the full list from the CSV, and refresh it on a schedule: providers add and retire prefixes often.
Sources
- Microsoft Azure: published IP ranges · checked 5 Nov 2026
- Microsoft Azure documentation