Share via

"Azure IP Ranges and Service Tags – Public Cloud" is not updated

Danil Klemyatin 0 Reputation points
2025-06-23T14:02:12.0533333+00:00

Official Azure IP list (https://www.microsoft.com/en-us/download/details.aspx?id=56519) is not updated with the latest IP ranges mentioned here (https://learn.microsoft.com/en-us/azure/devops/organizations/security/allow-list-ip-url?view=azure-devops&tabs=IP-V4) and here (https://devblogs.microsoft.com/devops/update-to-ado-allowed-ip-addresses/).
For example it doesn't contain IPv4 OUTBOUND range 150.171.x.x

Azure DevOps

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Durga Reshma Malthi 11,595 Reputation points Microsoft External Staff Moderator
    2025-06-23T14:24:54.1833333+00:00

    Hi Danil Klemyatin

    You're absolutely right, the official Azure IP Ranges and Service Tags download is updated on a monthly cadence and primarily includes Azure platform-wide IPs and Office 365 endpoints -It's meant for firewall rules in large corporate environments.

    However, Azure DevOps recently introduced new outbound IP ranges (like 150.171.0.0/16) that are not yet reflected in that download.

    These IP Addresses are specific to Azure DevOps Hosted Agents, especially for public Microsoft-hosted agents. These are not included in the downloadable XML because they are not general Azure service ranges as they're DevOps-specific agent egress IPs.

    If the list hasn't been updated as of June 2025, you may want to check the latest announcements or the official download page for any updates or changes - https://devblogs.microsoft.com/devops/update-to-ado-allowed-ip-addresses/

    Hope this helps!

    Please Let me know if you have any queries.

    Was this answer helpful?

    1 person found this answer helpful.

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.