Azure IP and Service Tag Lookup

Try an example:

Use Results with Context

Use matches to support network reviews, traffic analysis, and incident triage. A match does not identify a tenant, subscription, resource owner, or specific physical datacenter.

Common Use Cases

Network Review

Review addresses referenced in firewall rules, allowlists, routing changes, and architecture assessments.

Traffic Analysis

Check addresses from access and flow logs to understand whether traffic is associated with Azure Public Cloud ranges.

Incident Triage

Add Azure range context to security alerts and mitigation logs without treating a match as proof of ownership or intent.

Frequently Asked Questions

What does Azure IP & Service Tag Lookup identify?

The tool checks whether an address falls within prefixes published for Microsoft Azure Public Cloud service tags. It does not identify a resource owner, subscription, tenant, customer, physical datacenter, or geographic location.

Why can one address match multiple service tags?

Azure prefixes overlap by design. One address can match a service-specific tag, its regional variant, a regional AzureCloud tag, and the global AzureCloud tag. The most specific match uses the narrowest prefix and most specific regional scope returned by the lookup.

How are domain names and URLs handled?

A URL is reduced to its hostname. The lookup service resolves the hostname and checks the resulting address against Azure Public Cloud service tags. DNS answers can change by location and time, so repeating a domain lookup can produce different results.

Does the lookup support IPv6 addresses?

Yes. The tool accepts IPv4, IPv6, domain names, and HTTP/HTTPS URLs. IPv6 prefixes are displayed in the notation returned by the lookup API.

What does no service tag match mean?

It means the lookup did not find the address in the Azure Public Cloud service tag ranges returned for that request. It does not prove that the address is unrelated to Microsoft, Azure, a sovereign cloud, a CDN, or another service outside this dataset.

How often does Microsoft update Azure IP data?

Microsoft publishes updated Azure IP ranges and service tags weekly. See the Azure IP Ranges and Service Tags - Public Cloud download for the source dataset.

Can I automate lookups?

Yes. Send a GET request to /api/ipAddress?ipOrDomain=<ipAddressOrDomain>. Encode the query value and handle rate limits, timeouts, and transient failures in automated clients.