Change notification for Office 365 URLs and IP address ranges

 

Applies to: Office 365 Enterprise

This topic describes the updates that have been made to the URLs and IP addresses used by Microsoft Office 365 for enterprises, listed in Office 365 URLs and IP address ranges.

Revision date Description of revision

May 9, 2012

Added IP address 132.245.0.0/16 to the section under Microsoft Online Services sign in.

July 25, 2012

Added these Remote Connectivity Analyzer IP addresses: 65.55.150.61, 65.55.150.158, 65.55.150.160, 207.46.14.52, 207.46.14.62, 207.46.14.63

September 24, 2012

Added these Office 365 portal IP addresses and URLS: 65.52.240.233 passwordreset.microsoftonline.com, 157.55.185.100 passwordreset.microsoftonline.com, 65.54.165.55 g.msn.com

Added these Microsoft Online Services IP addresses: 65.54.74.0/23 *.msecnd.net, 65.54.80.0/20 *.msecnd.net, 65.55.86.0/23 *.msecnd.net, 70.37.128.0/23 *.msecnd.net, 70.37.142.0/23 *.msecnd.net, 70.37.159.0/23 *.msecnd.net, 94.245.68.0/22 *.msecnd.net, 94.245.82.0/23 *.msecnd.net, 94.245.84.0/24 *.msecnd.net, 94.245.86.0/24 *.msecnd.net, 111.221.70.0/25 *.msecnd.net, 111.221.71.0/25 *.msecnd.net, 157.56.200.0/23 *.msecnd.net, 207.46.70.0/24 *.msecnd.net, 207.46.206.0/23 *.msecnd.net, 213.199.148.0/23 *.msecnd.net, 157.56.53.128/25, 157.56.151.0/25

October 17, 2012

Added this Office 365 portal IP address: 65.54.55.201 osub.microsoft.com

Corrected this Microsoft Online Services IP address: from 70.37.159.0/23 *.msecnd.net to 70.37.159.0/24 *.msecnd.net

January 9, 2013

Added this Microsoft Online Services IP address: 207.46.57.128/25

February 20, 2013

Added this Microsoft Online Services IP address: 111.221.127.112/28

March 19, 2013

Added this Microsoft Online Services URL: *.office365.com

April 9, 2013

Added the following IPs and URLs to the Microsoft Online Services section. 65.55.233.0/27 g.microsoftonline.com, 65.54.165.0/25 g.microsoftonline.com, 157.56.23.32/27 g.microsoftonline.com

April 26, 2013

Added the following IPs and URLs to the Office 365 portal section. 65.52.148.27 portal.microsoftonline.com

May 7, 2013

Added the following IPs to the Microsoft Online Services section. 65.54.82.0/24 & 157.56.236.0/22

May 13, 2013

Added the following URLs. *.officeapps.live.com & *.office.net

July 9, 2013

Added the following URL. *.MSOCDN.COM

July 17, 2013

Added the following IP. 65.54.54.32/27

September 18, 2013

This was a large update for this topic; however, it was mostly re-organization & clarification… Added CDN clarification, moved links to services pages to the top for discoverability – these are required only if you are using the individual service, consolidated existing URLs, consolidated IP lists (added the IPv6 addresses), and added Yammer & Office 365 ProPlus IPs/URLs. The Office 365 ProPlus URLs were previously maintained at http://technet.microsoft.com/en-us/library/jj219420.aspx#BKMK_Ports and will now be maintained here (these are only required if you are using Office 365 ProPlus). Yammer URLs will still be maintained in success.yammer.com and duplicated here for convenience (these are only required if you are using Yammer).

October 22, 2013

Added two URLs *.activedirectory.windowsazure.com & *.phonefactor.net

November 5, 2013

Added Yammer URLs: *.yammerusercontent.com & *.assets-yammer.com

Added Office 365 IPs: 157.56.138.141, 157.56.138.142, 157.56.138.143

November 18, 2013

Added new IP range 111.221.24.0/21

January 21, 2014

Added Office Online section including the IPv4 range 131.170.0.0/16 and the IPv6 range including: 2a01:111:f406:8800::/64, 2a01:111:f406:400::/64, 2a01:111:f406:9400::/64, 2a01:111:f406:2402::/64, 2a01:111:f406:a804::/64

Added *.aadrm.com to the list of URLs

Removed 65.54.82.0/20 as it is included in the 65.54.80.0/20 range

March 11, 2014

Added Remote Connectivity Analyzer IP addresses 134.170.52.122, 134.170.52.123, 134.170.52.124.

April 15, 2014

For the Office 365 Suite, we added *.office.com & associated IP address range 191.234.6.0/24 to support the new portal.office.com. We also added *.onmicrosoft.com.

For Office 365 ProPlus we added, go.microsoft.com, sls.microsoft.com, & 157.55.160.109:443

April 22, 2014

For Office 365 ProPlus we added, office15client.microsoft.com & https://odc.officeapps.live.com

May 13, 2014

Office 365 Suite: Removed 207.46.150.128/25 from the Office 365 IP Address list. This range is now only used by Azure and not the Office 365 suite.

May 27, 2014

Office 365 Suite: Added 157.56.0.0/16 and removed a subset of that range 157.56.23.32/27, 157.56.53.128/25, 157.56.55.0/25, & 157.56.58.0/25

May 27, 2014 - June 3, 2014

Office 365 Suite: Added additional Windows Azure Active Directory IP addresses. If customers are currently filtering for AD authentication services, these IP addresses must be added. The list of NEW addresses to add include: 168.63.16.66/32, 168.63.16.112/32, 168.63.17.221/32, 168.63.16.114/32, 157.56.12.18/32, 157.56.12.208/32, 157.56.8.26/32, 157.56.8.39/32, 168.61.83.48/32, 168.61.82.81/32, 168.61.85.193/32, 168.61.85.180/32, 168.61.39.14/32, 168.61.35.252/32, 168.61.33.178/32, 168.61.37.63/32, 168.63.216.117/32, 168.63.208.73/32, 168.63.213.203/32, 168.63.214.35/32, 157.55.84.80/32, 157.55.84.19/32, 157.55.84.13/32, 157.55.84.237/32, 168.63.252.71/32, 168.63.250.173/32, 137.116.129.62/32, 168.63.252.39/32, 137.135.41.12/32, 137.135.44.73/32, 137.135.44.5/32, 137.135.48.128/32, 137.135.42.195/32, 137.135.43.100/32

May 27, 2014 - June 3, 2014

Office 365 Suite: Added Exchange Online & Lync Online URLs/IP Addresses to main Office 365 suite page. The independent Exchange Online & Lync Online pages will be decommissioned later in June. There are no changes to the Exchange Online & Lync Online URLs/IP Addresses for this update. Also note: The URL/IP page should no longer be accessed via the onlinehelp.microsoft.com URL and should be accessed via http://technet.microsoft.com/en-us/library/hh373144.aspx

June 17, 2014 - June 24, 2014

Office 365 Suite: Added additional Windows Azure Active Directory IP addresses. If customers are currently filtering for AD authentication services, these IP addresses must be added. The list of NEW addresses to add include: 23.96.208.238, 23.97.64.252, 23.97.68.113, 23.97.70.147, 23.97.72.158, 23.97.72.161, 23.97.72.165, 23.97.148.36, 23.97.148.228, 23.98.66.168, 23.98.69.116, 23.98.70.90, 65.52.64.61, 65.52.64.230, 65.52.136.224, 65.52.144.125, 65.52.228.75, 65.52.228.100, 65.52.236.160, 65.52.244.66, 70.37.56.152, 70.37.160.72, 70.37.160.202, 94.245.88.223, 94.245.88.194, 137.135.47.6, 137.135.47.4, 137.135.47.28, 137.117.99.175, 137.117.103.21, 157.55.80.175, 157.55.80.182, 157.55.168.18, 157.55.176.63, 157.55.208.198, 157.55.252.101, 168.61.36.121, 168.61.38.105, 168.62.4.28, 168.62.11.24, 168.62.11.117, 168.62.16.112, 168.62.16.140, 168.62.16.149, 168.62.24.104, 168.62.24.114, 168.62.24.150, 168.62.41.25, 168.62.42.89, 168.62.52.198, 168.62.52.203, 168.62.60.71, 168.62.60.80, 168.62.104.146, 168.62.176.34, 168.62.180.151, 168.63.25.227, 168.63.27.2, 168.63.166.200, 168.63.165.67, 168.63.164.177, 191.235.135.139, 191.235.135.222, 213.199.128.58, 213.199.128.91

June 17, 2014 - June 24, 2014

Exchange Online: Removed two subnets that are already included in the Office 365 list of IP Addresses. Both lists are required for Exchange Online to function properly. Please ensure that you have included both sets in your filtering rules. The two subnets that were duplicated and are now removed are: 132.245.0.0/16 & 157.56.0.0/16

June 17, 2014 - June 24, 2014

Lync Online: Four entries were left out of the original migration of the Lync Online IPs to the main page. They have been added and include: 111.221.17.128/27, 111.221.22.64/26, 111.221.23.0/25, 134.170.0.0/16.

July 1, 2014

Exchange Online: Added new IP range for Brazil datacenter 191.234.192.0/19.

July 1, 2014

Office Online: Fixed IP discrepancy in the IPv4 range replaced 134.170.0.0/16 with 131.170.0.0/16

July 15, 2014

Office Online: If 134.170.0.0/16 has already been added from the Office 365 list, the Office Online IPs are already included. For reference purposes we have added the following for the non-Brazil based customers (134.170.27.64/26, 134.170.48.0/26, 134.170.65.64/26, 134.170.128.192/26, 134.170.170.64/26). We are also adding 191.232.2.64/26 for Brazil based customers and should be removed from customer firewalls

July 22, 2014

Office 365: Removed Azure IP Addresses - 65.52.208.73 & 65.52.240.233 as they are no longer used for Office 365.

July 22, 2014

Exchange Online: Added 111.221.23.128/25, 132.245.0.0/16, 157.56.0.0/16, & 207.46.198.0/25. These were previously removed during the article merger as they were already included within the existing list of Office 365 subnets and IP addresses. They continue to be duplicated in the Office 365 list (and both lists are still required for Exchange Online to function properly); however, many customers need to understand which services are using which end points and this adds clarity for that purpose. Adding these to your Firewall will not change access (due to the larger ranges remaining in the Office 365 section), you can add them to clarify your rules or simply add them to your documentation.

August 12, 2014

Exchange Online: Added 191.234.140.0/22 and 191.234.224.0/22.

August 26, 2014

Office 365 Suite: Added additional Windows Azure Active Directory IP addresses. If customers are currently filtering for AD authentication services, these IP addresses must be added. 23.99.227.124, 23.99.226.167, 23.99.196.232, 23.99.194.77, 23.99.129.26, 23.99.129.173, 23.97.99.4, 23.97.99.164, 23.97.98.128, 23.97.102.90, 23.97.100.92, 23.97.100.76, 23.97.100.152, 23.97.100.105, 23.102.65.221, 23.102.65.203, 23.102.65.171, 23.102.64.255, 23.102.64.16, 191.238.83.220, 191.238.81.69, 191.238.80.160, 191.237.128.159, 191.236.192.179, 191.233.32.201, 191.233.32.111, 168.63.16.141, 168.62.179.4, 168.61.208.197, 168.61.144.76, 138.91.2.212, 138.91.2.210, 138.91.2.208, 138.91.18.52, 138.91.17.43, 138.91.17.108, 137.116.64.162, 137.116.48.69, 137.116.48.66, 137.116.32.61, 137.116.32.43, 137.116.129.62

September 2, 2014

Lync Online: Changed 134.170.0.0/16 to 134.170.0.0/25 to align with the scope of IP addresses that are in use.

September 9, 2014

Lync Online: Removed 111.221.23.0/25 as it is no longer in use by Lync Online.

September 30, 2014

Office 365: Added *.cloudapp.net to support Azure Rights Management and categorized the URLs. Added three ranges to support Office 365 authentication 157.55.45.128/25 (2a01:111:f406:1::/64), 191.232.2.128/25 (2a01:111:f406:a003::/64), and 70.37.150.128/25 (2801:80:1d0:1c00::/64).

September 30, 2014

Exchange Online: Clarified that *.outlook.com & *.office365.com are required for Exchange Online.

September 30, 2014

Lync Online: Clarified that *.Lync.com is required for Lync Online.

September 30, 2014

Office for iPad: Added the FQDNs that are required for Office for iPad to function. directory.services.live.com, odc.officeapps.live.com, docs.live.net, roaming.officeapps.live.com, nexus.officeapps.live.com, sqm.microsoft.com, watson.telemetry.microsoft.com, login.live.com, wer.microsoft.com, microsoft-my.sharepoint.com, login.microsoftonline.com, ms.tific.com, msft.sts.microsoft.com, p100-sandbox.itunes.apple.com, signup.live.com, auth.gfx.ms, view.atdmt.com, client.hip.live.com, dc2.client.hip.live.com, c.live.com, go.microsoft.com, office.microsoft.com, officeimg.vo.msecnd.net, m.webtrends.com, account.live.com, c.bing.com, partnerservices.getmicrosoftkey.com, client.hip.live.com, clientconfig.microsoftonline-p.net, cl2.apple.com, sas.office.microsoft.com, foodanddrink.services.appex.bing.com, en-US.appex-rf.msn.com, weather.tile.appex.bing.com

September 30, 2014

Office Mobile: Added the FQDNs that are required for Office Mobile to function. office15client.microsoft.com, odc.officeapps.live.com, go.microsoft.com, login.microsoftonline.com, msft.sts.microsoft.com, odcsm.officeapps.live.com, microsoft-my.sharepoint.com, ms.tific.com, roaming.officeapps.live.com, o15.officeredir.microsoft.com, office.microsoft.com, officeimg.vo.msecnd.net, m.webtrends.com, d.docs.live.net, login.live.com, auth.gfx.ms, wer.microsoft.com, *.appex.bing.com, *.appex-rf.msn.com, appexsin.stb.s-msn.com

October 7, 2014

Lync Online: Removed 65.54.54.128/25 and 157.55.104.96/27 as they are no longer in use by Lync Online.

October 9, 2014

SharePoint Online: Added several new ranges to SharePoint Online (25.177.64.0/23, 104.146.0.0/15, 191.234.128.0/21, 191.235.0.0/20, 134.177.0.0/16).

October 14, 2014

Office 365 portal and identity: Added several new IP addresses to support identity (23.97.66.110, 23.97.103.118, 23.97.145.9, 23.99.128.120, 23.99.193.105, 23.101.19.99, 23.101.25.224, 23.101.178.227, 23.101.187.91, 23.102.64.138, 65.52.176.72, 65.52.228.99, 65.52.232.52, 65.52.233.128, 65.52.240.73, 104.41.1.233, 137.116.32.101, 137.116.49.27, 137.116.242.169, 138.91.1.59, 157.55.161.59, 157.55.161.75, 157.55.208.58, 157.55.208.218, 157.56.28.192, 168.61.32.214, 168.62.16.252, 168.62.24.38, 168.62.56.108, 168.62.105.126, 168.62.105.217, 191.233.37.141, 191.238.80.241, 191.239.64.124, 191.239.64.125, 191.239.64.129, 191.239.64.130, 191.239.64.131, 191.239.64.132, 191.239.64.133, 191.239.64.134, 191.239.160.4, 191.239.160.93, 191.239.160.143, 191.239.160.140, 191.239.160.144, 191.239.160.145, 191.239.160.141, 191.239.160.142, 213.199.132.97).

October 21, 2014

SharePoint Online: The address 25.177.64.0/23 was added to the change log & RSS feed pre-maturely, it has not been formally added to the list of SharePoint IP addresses.

October 21, 2014

Exchange Online: Added 65.55.79.128/25 to the list of IP ranges for the Microsoft Federation Gateway.

October 28, 2014

Office 365 portal and identity: Added 137.116.80.106 & 157.56.8.78 to support identity.

October 28, 2014

SharePoint Online: Replaced list of IP addresses with updated list. The new list includes both old and new IP addresses and consolidates into subnets where possible. IPv4: 42.159.34.0/27, 42.159.38.0/23, 42.159.162.0/27, 42.159.166.0/23, 65.52.45.0/24, 65.55.22.32/27, 70.37.151.64/27, 94.245.113.160/27, 104.146.0.0/15, 111.221.17.160/27, 111.221.20.128/25, 111.221.22.32/27, 111.221.22.192/27, 111.221.64.160/27, 111.221.67.0/25, 134.170.200.0/21, 134.170.208.0/21, 134.177.0.0/16, 157.55.43.32/27, 157.55.46.128/27, 157.55.56.0/27, 157.55.62.96/27, 157.55.62.128/27, 157.55.103.0/27, 157.55.144.64/26, 157.55.145.192/27, 157.55.147.0/27, 157.55.151.192/27, 157.55.152.128/25, 157.55.153.0/27, 157.55.153.64/26, 157.55.154.64/27, 157.55.225.160/27, 157.55.225.224/27, 157.55.227.128/27, 157.55.229.0/25, 157.55.229.160/27, 157.55.231.32/27, 157.55.232.0/27, 157.55.235.64/27, 157.55.238.128/27, 157.56.24.128/27, 157.56.48.0/27, 157.56.80.128/27, 157.56.81.192/26, 157.56.113.0/27, 157.56.132.128/26, 157.56.150.32/27, 191.232.0.0/23, 191.234.8.0/21, 191.234.76.0/23, 191.234.128.0/21, 191.234.144.0/20, 191.234.148.0/22, 191.234.152.0/23, 191.234.192.0/19, 191.235.0.0/20, 207.46.203.128/27, 213.199.179.0/27.

IPv6: 2a01:111:f402::/48, 2801:80:1d0:1400::/54

November 4, 2014

Yammer: Replaced the existing URLs with a shorter up to date list (*.assets-yammer.com, *.cloudfront.net, *.yammer.com, & *.yammerusercontent.com) Removing *.amazonaws.com, *.cotssl.net, & *.edgekey.net.

November 11, 2014

Yammer: Added ajax.googleapis.com, *.crocodoc.com which are used to support the viewing of uploaded documents, video, & images.

November 25, 2014

Lync Online: Added several smaller subnets (23.103.129.0/25, 23.103.130.128/26, 132.245.0.0/24, 132.245.1.0/25, 132.245.112.0/24, 132.245.113.0/25, 132.245.128.0/24, 132.245.129.0/25, 132.245.161.0/24, 132.245.162.0/25, 132.245.192.0/24, 132.245.193.0/25, 132.245.208.0/24, 132.245.209.0/25, 157.56.135.64/26, 157.56.135.160/27, 157.56.184.224/27, 157.56.185.0/26, 134.170.53.32/27, 134.170.54.0/26, 134.170.54.128/25, 134.170.113.192/26, 134.170.115.0/27, 134.170.115.128/25, 191.232.83.32/27).

November 25, 2014

Office Online: Added IPv4 & IPv6 (23.103.183.0/26) & (2a01:111:f406:1c01::/64 & 2a01:111:f406:b401::/64).

November 25, 2014

Exchange Online: Added IPv4 & IPv6 (23.103.160.0/20) & (2a01:111:f400::/48).

December 9, 2014

Lync Online: Added subnets to support new datacenters (23.103.128.0/25, 23.103.128.128/25, 23.103.130.0/26, 23.103.130.64/26, 191.232.80.96/27, 191.232.83.0/27).

December 16, 2014

Lync Online: Added subnets to support new datacenters (66.119.157.0/25, 66.119.157.192/26, 2a01:111:2035:6::/64, 2a01:111:2035:7::/64).

December 16, 2014

Exchange Online Protection: Important update to the EOP IP list (23.103.132.0/23, 23.103.134.0/23, 23.103.144.0/19, 23.103.191.0/24, 23.103.198.0/23, 23.103.200.0/21, 23.130.156.0/22, 64.4.22.64/26, 65.55.169.0/24, 65.55.83.128/27, 104.47.0.0/17, 134.170.132.0/24, 134.170.140.0/24, 134.170.171.0/24, 157.55.133.160/27, 157.55.158.0/23, 157.55.234.0/24, 157.55.206.0/23, 157.56.73.0/24, 157.56.87.192/26, 157.56.108.0/24, 157.56.110.0/24, 157.56.111.0/24, 157.56.112.0/24, 157.56.206.0/24, 157.56.208.0/22, 207.46.100.0/24, 207.46.101.128/26 & 2a01:111:f400:fc00::/54).

January 13, 2015

Exchange Online Protection: Minor adjustments to the list published in December (23.103.132.0/23 -> change to 23.103.132.0/22, 23.103.134.0/23 -> remove (included in other ranges), 23.103.144.0/19 -> change to 23.103.144.0/22, 23.130.156.0/22 -> change to 23.103.136.0/21).

January 27, 2015

Lync Online: Added subnet to support new datacenters (66.119.158.0/25).

March 2015

Going forward all changes will be tracked in the RSS feed and this page will no longer be maintained. For a list of changes and their dates, please see the RSS feed.