Azure public cloud: IP ranges and service tags

Microsoft publishes the IP prefixes of every Azure service tag in a weekly file. We read each new file and keep the prefixes every tag gained or lost, so you can see when a range was added before it shows up in your firewall logs.

Current file

Current file
ServiceTags_Public_20261109.json
Published
9 November 2026
Change number
426
Service tags
3398 (108 without a region, 3290 regional)
We last saw a change
Source
Microsoft Download Center

Service tags without a region

Regional tags (for example AzureCloud.westeurope) are part of each tag's page under "Related".

Service tagIPv4IPv6VersionsLast change
ActionGroup1621501
AgentFabric59591
ApiManagement3811101
AppConfiguration4962411
AppService10902081
AppServiceManagement2942211
ApplicationInsightsAvailability3101
AutonomousDevelopmentPlatform119141
AzureActiveDirectory311931
AzureActiveDirectory.ServiceEndpoint8484391
AzureActiveDirectoryDomainServices100471
AzureAdvancedThreatProtection101811
AzureArcInfrastructure4821071
AzureAttestation5081491
AzureBackup3902041
AzureBotService125811
AzureCloud256223471
AzureCognitiveSearch86831
AzureConnectors5061041
AzureContainerRegistry6016091
AzureCosmosDB6091921
AzureDataExplorerManagement1831321
AzureDataLake1901
AzureDatabricks563931
AzureDatabricksServerless1809131
AzureDevOps84631
AzureDevSpaces3601
AzureDeviceUpdate111641
AzureDigitalTwins292801
AzureEventGrid525811
AzureFrontDoor.Backend157921
AzureFrontDoor.FirstParty43281
AzureFrontDoor.Frontend1261031
AzureFrontDoor.MicrosoftSecurity431
AzureHealthcareAPIs306811
AzureInformationProtection89581
AzureIoTHub5073071
AzureKeyVault3383791
AzureLoadTestingInstanceManagement2401
AzureMachineLearning4983111
AzureMachineLearningInference5151181
AzureManagedGrafana2202141
AzureMonitor194912511
AzureMonitor.Core5964711
AzureMonitorForSAP2001
AzureOpenDatasets5001
AzurePortal2511051
AzureQuantum28241
AzureResourceManager2181671
AzureSecurityCenter40701
AzureSentinel497441
AzureSignalR130691
AzureSiteRecovery4488441
AzureSphere4001
AzureSpringCloud186811
AzureStack2031
AzureTrafficManager2101591
AzureUpdateDelivery144401
AzureWebPubSub132691
BatchNodeManagement376811
ChaosStudio12101
CognitiveServicesFrontend76741
CognitiveServicesManagement12742371
CopilotActions1701
DataFactory6014011
DataFactoryManagement3962981
Dynamics365BusinessCentral77431
Dynamics365ForMarketingEmail3901
EOPExternalPublishedIPs14721
EventHub3792841
GatewayManager307811
Grafana101
GuestAndHybridManagement5493581
HDInsight1931051
KustoAnalytics94841
LogicApps17321891
LogicAppsManagement730941
M365LighthouseProd2801
M365ManagementActivityApi2511781
M365ManagementActivityApiWebhook2251501
Marketplace12101
MicrosoftAzureFluidRelay37411
MicrosoftCloudAppSecurity229901
MicrosoftContainerRegistry1831901
MicrosoftDefenderForEndpoint3401
MicrosoftPurviewPolicyDistribution5501
OneDsCollector136661
PowerBI8452131
PowerPlatformInfra153111
PowerPlatformPlex43011
PowerQueryOnline4172381
SCCservice73221
Scuba237301
SecurityCopilot3701
SerialConsole203191
ServiceBus4582531
ServiceFabric2771911
Sql11154021
SqlManagement5583121
Storage496801
StorageMover2401
StorageSyncService1241131
SystemServiceAzureSpringAppsResourceProvider3201
VideoIndexer185461
Windows36575401
WindowsAdminCenter80601
WindowsVirtualDesktop521
ZeroTrustSegmentation4801

108 tags listed. Prefix lists are technical facts Microsoft publishes for customers to configure their networks.