Azure IP ranges
Current IP ranges (CIDRs) used by the Azure cloud infrastructure, updated daily.
| category | Datacenter & Hosting |
|---|---|
| website | https://azure.microsoft.com |
| ranges | 61,098 (44,193 IPv4, 16,905 IPv6) |
| last change | |
| downloads | 122,462 |
| download | txt csv json — permalinks, always the latest data |
curl -O https://cloud-ip-ranges.com/download/azure.txtRanges
Sample of 25 of 61,098 ranges. Download the full list above, or check a specific IP.
| CIDR | Type | Region | Tag |
|---|---|---|---|
| 4.144.0.0/12 | ipv4 | global | |
| 2602:fd5e:1::/63 | ipv6 | eastus | |
| 4.145.74.52/30 | ipv4 | global | ActionGroup |
| 2603:1000:4::10c/126 | ipv6 | global | ActionGroup |
| 13.86.97.224/28 | ipv4 | global | ApplicationInsightsAvailability |
| 20.14.121.176/31 | ipv4 | global | AutonomousDevelopmentPlatform |
| 2603:1020:5:4::240/124 | ipv6 | global | AutonomousDevelopmentPlatform |
| 4.146.0.16/28 | ipv4 | global | AzureAD |
| 2603:1000:4:9::1c0/122 | ipv6 | global | AzureAD |
| 4.208.124.106/31 | ipv4 | global | AzureAdvancedThreatProtection |
| 2603:1000:4::140/123 | ipv6 | global | AzureAdvancedThreatProtection |
| 4.145.19.64/28 | ipv4 | global | AzureAPIForFHIR |
| 2603:1000:4:1::4c0/123 | ipv6 | global | AzureAPIForFHIR |
| 4.146.0.14/31 | ipv4 | global | AzureApiManagement |
| 2603:1000:4:402::140/124 | ipv6 | global | AzureApiManagement |
| 4.190.144.192/27 | ipv4 | global | AzureAppConfiguration |
| 2603:1000:4:402::2e0/123 | ipv6 | global | AzureAppConfiguration |
| 4.232.99.0/24 | ipv4 | global | AzureAppService |
| 2603:1000:4:2::400/120 | ipv6 | global | AzureAppService |
| 4.145.0.64/29 | ipv4 | global | AzureAppServiceManagement |
| 2603:1000:4:1::480/123 | ipv6 | global | AzureAppServiceManagement |
| 4.145.20.102/32 | ipv4 | global | AzureArcInfrastructure |
| 2603:1000:104:b::dc/128 | ipv6 | global | AzureArcInfrastructure |
| 4.144.15.72/29 | ipv4 | global | AzureAttestation |
| 2603:1000:4:9::1b0/124 | ipv6 | global | AzureAttestation |
Blocking Azure
iptables
curl -sO https://cloud-ip-ranges.com/download/azure.txt
while read ip; do
iptables -A INPUT -s $ip -j DROP
iptables -A OUTPUT -d $ip -j DROP
done < azure.txtufw
curl -sO https://cloud-ip-ranges.com/download/azure.txt
while read ip; do
ufw deny from $ip
ufw deny to $ip
done < azure.txtfail2ban
sudo tee /etc/fail2ban/filter.d/azure-block.conf << EOF
[Definition]
failregex = ^.*$
ignoreregex =
EOF
sudo tee /etc/fail2ban/jail.d/azure-block.conf << EOF
[azure-block]
enabled = true
filter = azure-block
action = iptables-allports[name=azure]
logpath = /tmp/azure.txt
findtime = 1
bantime = -1
maxretry = 1
EOF
curl -so /tmp/azure.txt https://cloud-ip-ranges.com/download/azure.txt
sudo systemctl restart fail2banpfSense / OPNsense
curl -sO https://cloud-ip-ranges.com/download/azure.txt
# Firewall > Aliases: new alias AZURE_BLOCK, type Network(s), import the file
# Firewall > Rules > WAN: Action=Block, Source=AZURE_BLOCKAbout
These IP ranges are sourced directly from Azure's official feeds and are updated regularly to ensure accuracy. The data includes IPv4 and IPv6 ranges used by Azure's infrastructure worldwide. Last update was 7 days ago.
Other providers
AirVPN, Akamai, Alibaba, Alpha Strike Labs, Amazonbot, Amzn-SearchBot, Amzn-User, Anthropic, AppleBot, Atlassian, AWS, Backblaze, Baidu, BinaryEdge, BingBot, Bunny, CacheFly, CCBot, Censys, ChatGPT-User, ClaudeBot, Cloudflare, Datadog, DigitalOcean, DuckDuckBot, Fastly, Gabia, G-Core, GitHub, Googlebot, Google Cloud, Google Public DNS, Google Services, GPTBot, Hetzner, Hostway, Huawei Cloud, IBM Cloud, iCloud Private Relay, Internet Archive, IVPN, Leaseweb, Linode, Meta, Microsoft 365, Mistral, Mullvad, NHN Cloud, NordVPN, OpenAI ChatGPT, OpenAI SearchBot, Oracle Cloud, OVHcloud, OVPN.com, PerplexityBot, Perplexity-User, Pingdom, Private Internet Access, QUIC.cloud, Rackspace, Rapid7 Sonar, Salesforce, Scaleway, Shodan, StatusCake, StormWall, Stretchoid, Sucuri, Telegram, Tencent, TOR, UpCloud, UptimeRobot, Vultr, Wasabi, Windscribe, Yandex, Zoho, Zoom, Zscaler