azure · AzureStack

Microsoft Azure uses 23 prefixes for AzureStack.

Short answer

Microsoft Azure lists these prefixes under “AzureStack”. Microsoft publishes Azure’s ranges weekly as Service Tags: named groups such as AzureCloud, Storage, Sql or AzureFrontDoor.Frontend, each a list of prefixes. We import the global (non-regional) tags.

IPv4 prefixes20
IPv6 prefixes3
Regions in the first 100—
Fetched by peekip5 Nov 2026

Prefixes

PrefixRegion / locationService
157.55.93.14/31—AzureStack
157.55.93.64/29—AzureStack
172.201.237.56/29—AzureStack
20.51.12.16/28—AzureStack
20.61.103.64/28—AzureStack
20.69.0.224/28—AzureStack
4.207.253.18/31—AzureStack
4.207.253.24/29—AzureStack
48.209.202.246/31—AzureStack
48.209.202.248/30—AzureStack
52.159.217.224/28—AzureStack
52.159.222.48/28—AzureStack
57.153.217.220/32—AzureStack
57.153.217.240/28—AzureStack
72.145.57.144/30—AzureStack
72.145.57.148/31—AzureStack
72.147.174.6/31—AzureStack
72.147.174.8/30—AzureStack
72.153.152.34/31—AzureStack
72.153.152.36/30—AzureStack
2603:1020:206:4::780/121—AzureStack
2603:1030:b04:3::600/121—AzureStack
2603:1030:c06:a::180/121—AzureStack
Showing 23 of 23 prefixes All prefixes (CSV)

What changed

No prefixes added or removed since we started tracking this list. Changes appear here the day after the provider publishes them.

Allowlist formats

nginx (first 5 prefixes)
allow 157.55.93.14/31;
allow 157.55.93.64/29;
allow 172.201.237.56/29;
allow 20.51.12.16/28;
allow 20.61.103.64/28;
deny all;
iptables (first 5 prefixes)
iptables -A INPUT -s 157.55.93.14/31 -j ACCEPT
iptables -A INPUT -s 157.55.93.64/29 -j ACCEPT
iptables -A INPUT -s 172.201.237.56/29 -j ACCEPT
iptables -A INPUT -s 20.51.12.16/28 -j ACCEPT
iptables -A INPUT -s 20.61.103.64/28 -j ACCEPT

Generate the full list from the CSV, and refresh it on a schedule: providers add and retire prefixes often.

Sources

  1. Microsoft Azure: published IP ranges · checked 5 Nov 2026
  2. Microsoft Azure documentation