azure · AzureSentinel

Microsoft Azure uses 541 prefixes for AzureSentinel.

Short answer

Microsoft Azure lists these prefixes under “AzureSentinel”. Microsoft publishes Azure’s ranges weekly as Service Tags: named groups such as AzureCloud, Storage, Sql or AzureFrontDoor.Frontend, each a list of prefixes. We import the global (non-regional) tags.

IPv4 prefixes497
IPv6 prefixes44
Regions in the first 100—
Fetched by peekip5 Nov 2026

Prefixes

PrefixRegion / locationService
102.133.139.160/32—AzureSentinel
104.208.197.204/30—AzureSentinel
104.208.197.224/27—AzureSentinel
104.208.199.0/30—AzureSentinel
108.140.47.196/31—AzureSentinel
128.203.32.0/28—AzureSentinel
128.203.32.16/30—AzureSentinel
128.24.7.160/30—AzureSentinel
128.24.7.172/30—AzureSentinel
128.24.7.176/28—AzureSentinel
128.85.20.76/30—AzureSentinel
130.107.0.16/31—AzureSentinel
131.163.111.96/28—AzureSentinel
132.164.237.192/28—AzureSentinel
132.164.237.208/29—AzureSentinel
132.164.237.216/30—AzureSentinel
132.164.237.220/31—AzureSentinel
132.220.81.154/31—AzureSentinel
132.220.84.128/28—AzureSentinel
132.220.84.144/29—AzureSentinel
132.220.84.152/30—AzureSentinel
134.138.73.184/29—AzureSentinel
135.116.175.224/28—AzureSentinel
135.119.2.16/28—AzureSentinel
135.119.2.32/29—AzureSentinel
135.119.2.4/30—AzureSentinel
135.119.2.40/31—AzureSentinel
135.171.186.128/28—AzureSentinel
135.18.135.136/29—AzureSentinel
135.18.135.144/28—AzureSentinel
135.18.135.160/30—AzureSentinel
135.18.135.164/31—AzureSentinel
135.225.179.228/31—AzureSentinel
135.232.169.124/31—AzureSentinel
135.232.86.192/29—AzureSentinel
135.232.89.152/31—AzureSentinel
135.232.93.160/31—AzureSentinel
135.233.200.32/30—AzureSentinel
135.233.81.89/32—AzureSentinel
135.234.21.16/28—AzureSentinel
135.234.21.64/30—AzureSentinel
158.23.108.200/30—AzureSentinel
158.23.108.224/28—AzureSentinel
158.23.108.32/29—AzureSentinel
172.129.191.0/26—AzureSentinel
172.129.84.72/29—AzureSentinel
172.134.21.224/28—AzureSentinel
172.143.2.0/27—AzureSentinel
172.161.112.232/30—AzureSentinel
172.161.113.32/27—AzureSentinel
Showing 50 of 541 prefixes All prefixes (CSV)

What changed

  • 21 Oct 2026
    + 135.232.89.152/31
    + 135.232.93.160/31
    + 135.233.81.89/32
    + 172.129.191.0/26
    + 172.134.21.224/28
    + 172.143.2.0/27
    + 172.161.112.232/30
    + 172.161.113.32/27
    + 172.161.113.64/28
    + 172.165.101.218/31
    + 172.165.101.240/28
    + 172.165.118.0/27
    + 172.165.118.32/30
    + 172.165.118.36/32
    + 172.186.159.188/30
    + 172.186.166.128/27
    + 172.186.166.80/28
    + 172.187.46.74/31
    + 172.187.46.78/32
    + 172.199.131.56/30
    + 20.15.210.192/26
    + 4.147.36.152/30
    + 4.161.15.0/27
    + 4.161.15.32/28
    + 4.161.181.106/31
    + 4.161.181.184/30
    + 4.186.5.32/27
    + 4.186.90.105/32
    + 4.186.90.106/31
    + 4.188.127.36/30
    + 4.195.181.255/32
    + 4.195.182.232/31
    + 4.199.60.62/31
    + 4.199.61.48/30
    + 4.199.63.0/27
    + 4.200.218.210/32
    + 4.200.218.224/28
    + 4.209.235.6/31
    + 4.209.6.120/30
    + 4.213.110.0/28
    + 4.213.110.16/31
    + 4.226.69.138/31
    + 4.247.48.181/32
    + 4.247.48.190/31
    + 4.247.49.56/30
    + 4.247.49.64/27
    + 4.247.49.96/28
    + 40.84.114.36/30
    + 48.204.199.192/26
    + 48.209.198.8/31
    + 48.214.138.152/30
    + 51.4.10.166/31
    + 51.4.10.168/30
    + 51.56.233.208/28
    + 51.56.233.224/27
    + 51.58.117.32/27
    + 51.58.117.64/28
    + 51.58.164.63/32
    + 51.58.175.144/28
    + 51.58.175.160/27
    

Allowlist formats

nginx (first 5 prefixes)
allow 102.133.139.160/32;
allow 104.208.197.204/30;
allow 104.208.197.224/27;
allow 104.208.199.0/30;
allow 108.140.47.196/31;
deny all;
iptables (first 5 prefixes)
iptables -A INPUT -s 102.133.139.160/32 -j ACCEPT
iptables -A INPUT -s 104.208.197.204/30 -j ACCEPT
iptables -A INPUT -s 104.208.197.224/27 -j ACCEPT
iptables -A INPUT -s 104.208.199.0/30 -j ACCEPT
iptables -A INPUT -s 108.140.47.196/31 -j ACCEPT

Generate the full list from the CSV, and refresh it on a schedule: providers add and retire prefixes often.

Sources

  1. Microsoft Azure: published IP ranges · checked 5 Nov 2026
  2. Microsoft Azure documentation