Azure IP Ranges
IP address ranges used by Azure services (service tags), fetched from the official Azure IP Ranges and Service Tags - Public Cloud download.
Snapshot totals: loading…
Distinct prefixes: loading…
Date from source filename
The IP-range snapshot could not be loaded or validated. Please retry.
Check an IP address
Enter an address or choose an example.
Explore a service tag
About Azure IP ranges and service tags
Azure publishes the public IP ranges behind its services as a weekly JSON download, grouped into service tags such as Storage, AzureCloud, Sql, and their regional variants. This page reads that published data so you can search a tag or look up which service an address belongs to.
How to use it
- Search by service tag name to list every prefix it currently covers.
- Search by region to narrow a tag down to a single location.
- Use the results when a firewall or an on-premises appliance cannot resolve service tags natively.
Prefer service tags to hardcoded ranges
Inside Azure, reference the tag itself in network security groups, Azure Firewall rules, and user-defined routes. Microsoft updates the membership of a tag automatically, so a rule written against Storage.westeurope keeps working as prefixes are added or retired. Copying literal ranges into a rule set means owning the maintenance of that list forever.
The published file changes regularly and new ranges are announced roughly a week before they go live, so a firewall built on static copies needs a scheduled refresh to avoid silent breakage.