Microsoft Azure uses 541 prefixes for AzureSentinel.
Short answer
Microsoft Azure lists these prefixes under “AzureSentinel”. Microsoft publishes Azure’s ranges weekly as Service Tags: named groups such as AzureCloud, Storage, Sql or AzureFrontDoor.Frontend, each a list of prefixes. We import the global (non-regional) tags.
Prefixes
What changed
- 21 Oct 2026
+ 135.232.89.152/31 + 135.232.93.160/31 + 135.233.81.89/32 + 172.129.191.0/26 + 172.134.21.224/28 + 172.143.2.0/27 + 172.161.112.232/30 + 172.161.113.32/27 + 172.161.113.64/28 + 172.165.101.218/31 + 172.165.101.240/28 + 172.165.118.0/27 + 172.165.118.32/30 + 172.165.118.36/32 + 172.186.159.188/30 + 172.186.166.128/27 + 172.186.166.80/28 + 172.187.46.74/31 + 172.187.46.78/32 + 172.199.131.56/30 + 20.15.210.192/26 + 4.147.36.152/30 + 4.161.15.0/27 + 4.161.15.32/28 + 4.161.181.106/31 + 4.161.181.184/30 + 4.186.5.32/27 + 4.186.90.105/32 + 4.186.90.106/31 + 4.188.127.36/30 + 4.195.181.255/32 + 4.195.182.232/31 + 4.199.60.62/31 + 4.199.61.48/30 + 4.199.63.0/27 + 4.200.218.210/32 + 4.200.218.224/28 + 4.209.235.6/31 + 4.209.6.120/30 + 4.213.110.0/28 + 4.213.110.16/31 + 4.226.69.138/31 + 4.247.48.181/32 + 4.247.48.190/31 + 4.247.49.56/30 + 4.247.49.64/27 + 4.247.49.96/28 + 40.84.114.36/30 + 48.204.199.192/26 + 48.209.198.8/31 + 48.214.138.152/30 + 51.4.10.166/31 + 51.4.10.168/30 + 51.56.233.208/28 + 51.56.233.224/27 + 51.58.117.32/27 + 51.58.117.64/28 + 51.58.164.63/32 + 51.58.175.144/28 + 51.58.175.160/27
Allowlist formats
nginx (first 5 prefixes)
allow 102.133.139.160/32; allow 104.208.197.204/30; allow 104.208.197.224/27; allow 104.208.199.0/30; allow 108.140.47.196/31; deny all;
iptables (first 5 prefixes)
iptables -A INPUT -s 102.133.139.160/32 -j ACCEPT iptables -A INPUT -s 104.208.197.204/30 -j ACCEPT iptables -A INPUT -s 104.208.197.224/27 -j ACCEPT iptables -A INPUT -s 104.208.199.0/30 -j ACCEPT iptables -A INPUT -s 108.140.47.196/31 -j ACCEPT
Generate the full list from the CSV, and refresh it on a schedule: providers add and retire prefixes often.
Sources
- Microsoft Azure: published IP ranges · checked 5 Nov 2026
- Microsoft Azure documentation