Azure service tags & public IPs
Microsoft Learn overview and links to the service tag JSON used for Azure firewall and NSG rules.
Microsoft Azure
Microsoft publishes Azure service tags and downloadable JSON for public IP ranges used by Azure services (distinct from Bing or M365 unless included in the same file).
Autonomous systems
Commonly cited Microsoft / Azure ASNs
Not every Azure IP maps to these ASNs alone; prefer the official service tag JSON for allowlists.
Announced under this company
AS8075AS12076
Published ranges
Official documentation and feeds for each product—open the links for current ranges and verification guidance.
Azure CDN & Front Door — backend allowlisting
Microsoft documents using AzureFrontDoor.Backend and the downloadable service-tag JSON to restrict origins to Microsoft CDN and Front Door backends. Azure CDN from Edgio was retired January 2025; classic Microsoft CDN has a 2027 retirement milestone.