Sign inMonitor a domain
azure · ZeroTrustSegmentation

Microsoft Azure uses 48 prefixes for ZeroTrustSegmentation.

Last updated 5 Nov 2026 from Microsoft Azure’s own list (file dated 2026-11-02 (change 425))

Short answer

Microsoft Azure lists these prefixes under “ZeroTrustSegmentation”. Microsoft publishes Azure’s ranges weekly as Service Tags: named groups such as AzureCloud, Storage, Sql or AzureFrontDoor.Frontend, each a list of prefixes. We import the global (non-regional) tags.

IPv4 prefixes48
IPv6 prefixes0
Regions in the first 100—
Fetched by peekip5 Nov 2026

Prefixes

PrefixRegion / locationService
131.145.67.223/32—ZeroTrustSegmentation
131.145.67.244/30—ZeroTrustSegmentation
132.164.237.100/30—ZeroTrustSegmentation
132.164.237.99/32—ZeroTrustSegmentation
132.220.81.153/32—ZeroTrustSegmentation
132.220.81.156/30—ZeroTrustSegmentation
134.33.186.225/32—ZeroTrustSegmentation
134.33.186.228/30—ZeroTrustSegmentation
135.119.0.33/32—ZeroTrustSegmentation
135.119.0.48/30—ZeroTrustSegmentation
172.208.252.131/32—ZeroTrustSegmentation
172.208.254.100/30—ZeroTrustSegmentation
172.215.90.238/32—ZeroTrustSegmentation
172.215.94.80/30—ZeroTrustSegmentation
20.172.127.156/30—ZeroTrustSegmentation
20.172.127.160/32—ZeroTrustSegmentation
20.51.44.57/32—ZeroTrustSegmentation
20.51.44.88/30—ZeroTrustSegmentation
20.66.129.10/32—ZeroTrustSegmentation
20.66.129.12/30—ZeroTrustSegmentation
4.145.19.42/32—ZeroTrustSegmentation
4.145.19.48/30—ZeroTrustSegmentation
4.191.86.254/32—ZeroTrustSegmentation
4.191.87.40/30—ZeroTrustSegmentation
4.196.133.220/30—ZeroTrustSegmentation
4.196.133.77/32—ZeroTrustSegmentation
4.223.185.63/32—ZeroTrustSegmentation
4.223.186.36/30—ZeroTrustSegmentation
48.192.209.60/30—ZeroTrustSegmentation
48.192.210.8/32—ZeroTrustSegmentation
48.195.61.112/30—ZeroTrustSegmentation
48.195.61.116/32—ZeroTrustSegmentation
48.199.208.158/32—ZeroTrustSegmentation
48.199.208.200/30—ZeroTrustSegmentation
48.202.187.193/32—ZeroTrustSegmentation
48.202.187.196/30—ZeroTrustSegmentation
48.204.169.151/32—ZeroTrustSegmentation
48.204.170.84/30—ZeroTrustSegmentation
48.204.5.144/30—ZeroTrustSegmentation
48.204.5.148/32—ZeroTrustSegmentation
48.220.60.10/32—ZeroTrustSegmentation
48.220.60.12/30—ZeroTrustSegmentation
57.158.47.121/32—ZeroTrustSegmentation
57.158.47.124/30—ZeroTrustSegmentation
72.147.59.211/32—ZeroTrustSegmentation
72.147.61.144/30—ZeroTrustSegmentation
74.177.72.71/32—ZeroTrustSegmentation
85.210.237.144/30—ZeroTrustSegmentation
Showing 48 of 48 prefixes All prefixes (CSV)

What changed

No prefixes added or removed since we started tracking this list. Changes appear here the day after the provider publishes them.

Allowlist formats

nginx (first 5 prefixes)
allow 131.145.67.223/32;
allow 131.145.67.244/30;
allow 132.164.237.100/30;
allow 132.164.237.99/32;
allow 132.220.81.153/32;
deny all;
iptables (first 5 prefixes)
iptables -A INPUT -s 131.145.67.223/32 -j ACCEPT
iptables -A INPUT -s 131.145.67.244/30 -j ACCEPT
iptables -A INPUT -s 132.164.237.100/30 -j ACCEPT
iptables -A INPUT -s 132.164.237.99/32 -j ACCEPT
iptables -A INPUT -s 132.220.81.153/32 -j ACCEPT

Generate the full list from the CSV, and refresh it on a schedule: providers add and retire prefixes often.

Sources

  1. Microsoft Azure: published IP ranges · checked 5 Nov 2026
  2. Microsoft Azure documentation