Microsoft Azure uses 267 prefixes for Scuba.
Short answer
Microsoft Azure lists these prefixes under “Scuba”. Microsoft publishes Azure’s ranges weekly as Service Tags: named groups such as AzureCloud, Storage, Sql or AzureFrontDoor.Frontend, each a list of prefixes. We import the global (non-regional) tags.
Prefixes
What changed
- 30 Oct 2026
+ 172.140.129.16/28 + 172.147.5.16/28 + 74.155.58.16/28 + 74.159.251.144/28
Allowlist formats
nginx (first 5 prefixes)
allow 104.208.170.56/29; allow 104.208.180.140/30; allow 134.138.217.144/28; allow 134.138.217.160/27; allow 134.138.245.16/28; deny all;
iptables (first 5 prefixes)
iptables -A INPUT -s 104.208.170.56/29 -j ACCEPT iptables -A INPUT -s 104.208.180.140/30 -j ACCEPT iptables -A INPUT -s 134.138.217.144/28 -j ACCEPT iptables -A INPUT -s 134.138.217.160/27 -j ACCEPT iptables -A INPUT -s 134.138.245.16/28 -j ACCEPT
Generate the full list from the CSV, and refresh it on a schedule: providers add and retire prefixes often.
Sources
- Microsoft Azure: published IP ranges · checked 4 Nov 2026
- Microsoft Azure documentation