Microsoft Azure uses 407 prefixes for AzureSecurityCenter.
Short answer
Microsoft Azure lists these prefixes under “AzureSecurityCenter”. Microsoft publishes Azure’s ranges weekly as Service Tags: named groups such as AzureCloud, Storage, Sql or AzureFrontDoor.Frontend, each a list of prefixes. We import the global (non-regional) tags.
Prefixes
What changed
- 30 Oct 2026
+ 9.205.223.128/29 + 9.205.223.96/27
- 21 Oct 2026
+ 135.233.81.90/31 + 172.169.156.128/28 + 20.15.210.128/26
Allowlist formats
nginx (first 5 prefixes)
allow 102.133.124.160/27; allow 102.37.64.64/27; allow 104.208.207.64/26; allow 104.214.164.64/27; allow 104.46.162.32/27; deny all;
iptables (first 5 prefixes)
iptables -A INPUT -s 102.133.124.160/27 -j ACCEPT iptables -A INPUT -s 102.37.64.64/27 -j ACCEPT iptables -A INPUT -s 104.208.207.64/26 -j ACCEPT iptables -A INPUT -s 104.214.164.64/27 -j ACCEPT iptables -A INPUT -s 104.46.162.32/27 -j ACCEPT
Generate the full list from the CSV, and refresh it on a schedule: providers add and retire prefixes often.
Sources
- Microsoft Azure: published IP ranges · checked 4 Nov 2026
- Microsoft Azure documentation