Change notification for Office 365 URLs and IP address ranges
Applies to: Office 365 Enterprise
This topic describes the updates that have been made to the URLs and IP addresses used by Microsoft Office 365 for enterprises, listed in Office 365 URLs and IP address ranges.
| Revision date | Description of revision |
|---|---|
May 9, 2012 |
Added IP address 132.245.0.0/16 to the section under Microsoft Online Services sign in. |
July 25, 2012 |
Added these Remote Connectivity Analyzer IP addresses: 65.55.150.61, 65.55.150.158, 65.55.150.160, 207.46.14.52, 207.46.14.62, 207.46.14.63 |
September 24, 2012 |
Added these Office 365 portal IP addresses and URLS: 65.52.240.233 passwordreset.microsoftonline.com, 157.55.185.100 passwordreset.microsoftonline.com, 65.54.165.55 g.msn.com Added these Microsoft Online Services IP addresses: 65.54.74.0/23 *.msecnd.net, 65.54.80.0/20 *.msecnd.net, 65.55.86.0/23 *.msecnd.net, 70.37.128.0/23 *.msecnd.net, 70.37.142.0/23 *.msecnd.net, 70.37.159.0/23 *.msecnd.net, 94.245.68.0/22 *.msecnd.net, 94.245.82.0/23 *.msecnd.net, 94.245.84.0/24 *.msecnd.net, 94.245.86.0/24 *.msecnd.net, 111.221.70.0/25 *.msecnd.net, 111.221.71.0/25 *.msecnd.net, 157.56.200.0/23 *.msecnd.net, 207.46.70.0/24 *.msecnd.net, 207.46.206.0/23 *.msecnd.net, 213.199.148.0/23 *.msecnd.net, 157.56.53.128/25, 157.56.151.0/25 |
October 17, 2012 |
Added this Office 365 portal IP address: 65.54.55.201 osub.microsoft.com Corrected this Microsoft Online Services IP address: from 70.37.159.0/23 *.msecnd.net to 70.37.159.0/24 *.msecnd.net |
January 9, 2013 |
Added this Microsoft Online Services IP address: 207.46.57.128/25 |
February 20, 2013 |
Added this Microsoft Online Services IP address: 111.221.127.112/28 |
March 19, 2013 |
Added this Microsoft Online Services URL: *.office365.com |
April 9, 2013 |
Added the following IPs and URLs to the Microsoft Online Services section. 65.55.233.0/27 g.microsoftonline.com, 65.54.165.0/25 g.microsoftonline.com, 157.56.23.32/27 g.microsoftonline.com |
April 26, 2013 |
Added the following IPs and URLs to the Office 365 portal section. 65.52.148.27 portal.microsoftonline.com |
May 7, 2013 |
Added the following IPs to the Microsoft Online Services section. 65.54.82.0/24 & 157.56.236.0/22 |
May 13, 2013 |
Added the following URLs. *.officeapps.live.com & *.office.net |
July 9, 2013 |
Added the following URL. *.MSOCDN.COM |
July 17, 2013 |
Added the following IP. 65.54.54.32/27 |
September 18, 2013 |
This was a large update for this topic; however, it was mostly re-organization & clarification… Added CDN clarification, moved links to services pages to the top for discoverability – these are required only if you are using the individual service, consolidated existing URLs, consolidated IP lists (added the IPv6 addresses), and added Yammer & Office 365 ProPlus IPs/URLs. The Office 365 ProPlus URLs were previously maintained at https://technet.microsoft.com/en-us/library/jj219420.aspx#BKMK_Ports and will now be maintained here (these are only required if you are using Office 365 ProPlus). Yammer URLs will still be maintained in success.yammer.com and duplicated here for convenience (these are only required if you are using Yammer). |
October 22, 2013 |
Added two URLs *.activedirectory.windowsazure.com & *.phonefactor.net |
November 5, 2013 |
Added Yammer URLs: *.yammerusercontent.com & *.assets-yammer.com Added Office 365 IPs: 157.56.138.141, 157.56.138.142, 157.56.138.143 |
November 18, 2013 |
Added new IP range 111.221.24.0/21 |
January 21, 2014 |
Added Office Online section including the IPv4 range 131.170.0.0/16 and the IPv6 range including: 2a01:111:f406:8800::/64, 2a01:111:f406:400::/64, 2a01:111:f406:9400::/64, 2a01:111:f406:2402::/64, 2a01:111:f406:a804::/64 Added *.aadrm.com to the list of URLs Removed 65.54.82.0/20 as it is included in the 65.54.80.0/20 range |
March 11, 2014 |
Added Remote Connectivity Analyzer IP addresses 134.170.52.122, 134.170.52.123, 134.170.52.124. |
April 15, 2014 |
For the Office 365 Suite, we added *.office.com & associated IP address range 191.234.6.0/24 to support the new portal.office.com. We also added *.onmicrosoft.com. For Office 365 ProPlus we added, go.microsoft.com, sls.microsoft.com, & 157.55.160.109:443 |
April 22, 2014 |
For Office 365 ProPlus we added, office15client.microsoft.com & https://odc.officeapps.live.com |
May 13, 2014 |
Office 365 Suite: Removed 207.46.150.128/25 from the Office 365 IP Address list. This range is now only used by Azure and not the Office 365 suite. |
May 27, 2014 |
Office 365 Suite: Added 157.56.0.0/16 and removed a subset of that range 157.56.23.32/27, 157.56.53.128/25, 157.56.55.0/25, & 157.56.58.0/25 |
May 27, 2014 - June 3, 2014 |
Office 365 Suite: Added additional Windows Azure Active Directory IP addresses. If customers are currently filtering for AD authentication services, these IP addresses must be added. The list of NEW addresses to add include: 168.63.16.66/32, 168.63.16.112/32, 168.63.17.221/32, 168.63.16.114/32, 157.56.12.18/32, 157.56.12.208/32, 157.56.8.26/32, 157.56.8.39/32, 168.61.83.48/32, 168.61.82.81/32, 168.61.85.193/32, 168.61.85.180/32, 168.61.39.14/32, 168.61.35.252/32, 168.61.33.178/32, 168.61.37.63/32, 168.63.216.117/32, 168.63.208.73/32, 168.63.213.203/32, 168.63.214.35/32, 157.55.84.80/32, 157.55.84.19/32, 157.55.84.13/32, 157.55.84.237/32, 168.63.252.71/32, 168.63.250.173/32, 137.116.129.62/32, 168.63.252.39/32, 137.135.41.12/32, 137.135.44.73/32, 137.135.44.5/32, 137.135.48.128/32, 137.135.42.195/32, 137.135.43.100/32 |
May 27, 2014 - June 3, 2014 |
Office 365 Suite: Added Exchange Online & Lync Online URLs/IP Addresses to main Office 365 suite page. The independent Exchange Online & Lync Online pages will be decommissioned later in June. There are no changes to the Exchange Online & Lync Online URLs/IP Addresses for this update. Also note: The URL/IP page should no longer be accessed via the onlinehelp.microsoft.com URL and should be accessed via https://technet.microsoft.com/en-us/library/hh373144.aspx |
June 17, 2014 - June 24, 2014 |
Office 365 Suite: Added additional Windows Azure Active Directory IP addresses. If customers are currently filtering for AD authentication services, these IP addresses must be added. The list of NEW addresses to add include: 23.96.208.238, 23.97.64.252, 23.97.68.113, 23.97.70.147, 23.97.72.158, 23.97.72.161, 23.97.72.165, 23.97.148.36, 23.97.148.228, 23.98.66.168, 23.98.69.116, 23.98.70.90, 65.52.64.61, 65.52.64.230, 65.52.136.224, 65.52.144.125, 65.52.228.75, 65.52.228.100, 65.52.236.160, 65.52.244.66, 70.37.56.152, 70.37.160.72, 70.37.160.202, 94.245.88.223, 94.245.88.194, 137.135.47.6, 137.135.47.4, 137.135.47.28, 137.117.99.175, 137.117.103.21, 157.55.80.175, 157.55.80.182, 157.55.168.18, 157.55.176.63, 157.55.208.198, 157.55.252.101, 168.61.36.121, 168.61.38.105, 168.62.4.28, 168.62.11.24, 168.62.11.117, 168.62.16.112, 168.62.16.140, 168.62.16.149, 168.62.24.104, 168.62.24.114, 168.62.24.150, 168.62.41.25, 168.62.42.89, 168.62.52.198, 168.62.52.203, 168.62.60.71, 168.62.60.80, 168.62.104.146, 168.62.176.34, 168.62.180.151, 168.63.25.227, 168.63.27.2, 168.63.166.200, 168.63.165.67, 168.63.164.177, 191.235.135.139, 191.235.135.222, 213.199.128.58, 213.199.128.91 |
June 17, 2014 - June 24, 2014 |
Exchange Online: Removed two subnets that are already included in the Office 365 list of IP Addresses. Both lists are required for Exchange Online to function properly. Please ensure that you have included both sets in your filtering rules. The two subnets that were duplicated and are now removed are: 132.245.0.0/16 & 157.56.0.0/16 |
June 17, 2014 - June 24, 2014 |
Lync Online: Four entries were left out of the original migration of the Lync Online IPs to the main page. They have been added and include: 111.221.17.128/27, 111.221.22.64/26, 111.221.23.0/25, 134.170.0.0/16. |
July 1, 2014 |
Exchange Online: Added new IP range for Brazil datacenter 191.234.192.0/19. |
July 1, 2014 |
Office Online: Fixed IP discrepancy in the IPv4 range replaced 134.170.0.0/16 with 131.170.0.0/16 |
July 15, 2014 |
Office Online: If 134.170.0.0/16 has already been added from the Office 365 list, the Office Online IPs are already included. For reference purposes we have added the following for the non-Brazil based customers (134.170.27.64/26, 134.170.48.0/26, 134.170.65.64/26, 134.170.128.192/26, 134.170.170.64/26). We are also adding 191.232.2.64/26 for Brazil based customers and should be removed from customer firewalls |
July 22, 2014 |
Office 365: Removed Azure IP Addresses - 65.52.208.73 & 65.52.240.233 as they are no longer used for Office 365. |
July 22, 2014 |
Exchange Online: Added 111.221.23.128/25, 132.245.0.0/16, 157.56.0.0/16, & 207.46.198.0/25. These were previously removed during the article merger as they were already included within the existing list of Office 365 subnets and IP addresses. They continue to be duplicated in the Office 365 list (and both lists are still required for Exchange Online to function properly); however, many customers need to understand which services are using which end points and this adds clarity for that purpose. Adding these to your Firewall will not change access (due to the larger ranges remaining in the Office 365 section), you can add them to clarify your rules or simply add them to your documentation. |
August 12, 2014 |
Exchange Online: Added 191.234.140.0/22 and 191.234.224.0/22. |
August 26, 2014 |
Office 365 Suite: Added additional Windows Azure Active Directory IP addresses. If customers are currently filtering for AD authentication services, these IP addresses must be added. 23.99.227.124, 23.99.226.167, 23.99.196.232, 23.99.194.77, 23.99.129.26, 23.99.129.173, 23.97.99.4, 23.97.99.164, 23.97.98.128, 23.97.102.90, 23.97.100.92, 23.97.100.76, 23.97.100.152, 23.97.100.105, 23.102.65.221, 23.102.65.203, 23.102.65.171, 23.102.64.255, 23.102.64.16, 191.238.83.220, 191.238.81.69, 191.238.80.160, 191.237.128.159, 191.236.192.179, 191.233.32.201, 191.233.32.111, 168.63.16.141, 168.62.179.4, 168.61.208.197, 168.61.144.76, 138.91.2.212, 138.91.2.210, 138.91.2.208, 138.91.18.52, 138.91.17.43, 138.91.17.108, 137.116.64.162, 137.116.48.69, 137.116.48.66, 137.116.32.61, 137.116.32.43, 137.116.129.62 |
September 2, 2014 |
Lync Online: Changed 134.170.0.0/16 to 134.170.0.0/25 to align with the scope of IP addresses that are in use. |
September 9, 2014 |
Lync Online: Removed 111.221.23.0/25 as it is no longer in use by Lync Online. |
September 30, 2014 |
Office 365: Added *.cloudapp.net to support Azure Rights Management and categorized the URLs. Added three ranges to support Office 365 authentication 157.55.45.128/25 (2a01:111:f406:1::/64), 191.232.2.128/25 (2a01:111:f406:a003::/64), and 70.37.150.128/25 (2801:80:1d0:1c00::/64). |
September 30, 2014 |
Exchange Online: Clarified that *.outlook.com & *.office365.com are required for Exchange Online. |
September 30, 2014 |
Lync Online: Clarified that *.Lync.com is required for Lync Online. |
September 30, 2014 |
Office for iPad: Added the FQDNs that are required for Office for iPad to function. directory.services.live.com, odc.officeapps.live.com, docs.live.net, roaming.officeapps.live.com, nexus.officeapps.live.com, sqm.microsoft.com, watson.telemetry.microsoft.com, login.live.com, wer.microsoft.com, microsoft-my.sharepoint.com, login.microsoftonline.com, ms.tific.com, msft.sts.microsoft.com, p100-sandbox.itunes.apple.com, signup.live.com, auth.gfx.ms, view.atdmt.com, client.hip.live.com, dc2.client.hip.live.com, c.live.com, go.microsoft.com, office.microsoft.com, officeimg.vo.msecnd.net, m.webtrends.com, account.live.com, c.bing.com, partnerservices.getmicrosoftkey.com, client.hip.live.com, clientconfig.microsoftonline-p.net, cl2.apple.com, sas.office.microsoft.com, foodanddrink.services.appex.bing.com, en-US.appex-rf.msn.com, weather.tile.appex.bing.com |
September 30, 2014 |
Office Mobile: Added the FQDNs that are required for Office Mobile to function. office15client.microsoft.com, odc.officeapps.live.com, go.microsoft.com, login.microsoftonline.com, msft.sts.microsoft.com, odcsm.officeapps.live.com, microsoft-my.sharepoint.com, ms.tific.com, roaming.officeapps.live.com, o15.officeredir.microsoft.com, office.microsoft.com, officeimg.vo.msecnd.net, m.webtrends.com, d.docs.live.net, login.live.com, auth.gfx.ms, wer.microsoft.com, *.appex.bing.com, *.appex-rf.msn.com, appexsin.stb.s-msn.com |
October 7, 2014 |
Lync Online: Removed 65.54.54.128/25 and 157.55.104.96/27 as they are no longer in use by Lync Online. |
October 9, 2014 |
SharePoint Online: Added several new ranges to SharePoint Online (25.177.64.0/23, 104.146.0.0/15, 191.234.128.0/21, 191.235.0.0/20, 134.177.0.0/16). |
October 14, 2014 |
Office 365 portal and identity: Added several new IP addresses to support identity (23.97.66.110, 23.97.103.118, 23.97.145.9, 23.99.128.120, 23.99.193.105, 23.101.19.99, 23.101.25.224, 23.101.178.227, 23.101.187.91, 23.102.64.138, 65.52.176.72, 65.52.228.99, 65.52.232.52, 65.52.233.128, 65.52.240.73, 104.41.1.233, 137.116.32.101, 137.116.49.27, 137.116.242.169, 138.91.1.59, 157.55.161.59, 157.55.161.75, 157.55.208.58, 157.55.208.218, 157.56.28.192, 168.61.32.214, 168.62.16.252, 168.62.24.38, 168.62.56.108, 168.62.105.126, 168.62.105.217, 191.233.37.141, 191.238.80.241, 191.239.64.124, 191.239.64.125, 191.239.64.129, 191.239.64.130, 191.239.64.131, 191.239.64.132, 191.239.64.133, 191.239.64.134, 191.239.160.4, 191.239.160.93, 191.239.160.143, 191.239.160.140, 191.239.160.144, 191.239.160.145, 191.239.160.141, 191.239.160.142, 213.199.132.97). |
October 21, 2014 |
SharePoint Online: The address 25.177.64.0/23 was added to the change log & RSS feed pre-maturely, it has not been formally added to the list of SharePoint IP addresses. |
October 21, 2014 |
Exchange Online: Added 65.55.79.128/25 to the list of IP ranges for the Microsoft Federation Gateway. |
October 28, 2014 |
Office 365 portal and identity: Added 137.116.80.106 & 157.56.8.78 to support identity. |
October 28, 2014 |
SharePoint Online: Replaced list of IP addresses with updated list. The new list includes both old and new IP addresses and consolidates into subnets where possible. IPv4: 42.159.34.0/27, 42.159.38.0/23, 42.159.162.0/27, 42.159.166.0/23, 65.52.45.0/24, 65.55.22.32/27, 70.37.151.64/27, 94.245.113.160/27, 104.146.0.0/15, 111.221.17.160/27, 111.221.20.128/25, 111.221.22.32/27, 111.221.22.192/27, 111.221.64.160/27, 111.221.67.0/25, 134.170.200.0/21, 134.170.208.0/21, 134.177.0.0/16, 157.55.43.32/27, 157.55.46.128/27, 157.55.56.0/27, 157.55.62.96/27, 157.55.62.128/27, 157.55.103.0/27, 157.55.144.64/26, 157.55.145.192/27, 157.55.147.0/27, 157.55.151.192/27, 157.55.152.128/25, 157.55.153.0/27, 157.55.153.64/26, 157.55.154.64/27, 157.55.225.160/27, 157.55.225.224/27, 157.55.227.128/27, 157.55.229.0/25, 157.55.229.160/27, 157.55.231.32/27, 157.55.232.0/27, 157.55.235.64/27, 157.55.238.128/27, 157.56.24.128/27, 157.56.48.0/27, 157.56.80.128/27, 157.56.81.192/26, 157.56.113.0/27, 157.56.132.128/26, 157.56.150.32/27, 191.232.0.0/23, 191.234.8.0/21, 191.234.76.0/23, 191.234.128.0/21, 191.234.144.0/20, 191.234.148.0/22, 191.234.152.0/23, 191.234.192.0/19, 191.235.0.0/20, 207.46.203.128/27, 213.199.179.0/27. IPv6: 2a01:111:f402::/48, 2801:80:1d0:1400::/54 |
November 4, 2014 |
Yammer: Replaced the existing URLs with a shorter up to date list (*.assets-yammer.com, *.cloudfront.net, *.yammer.com, & *.yammerusercontent.com) Removing *.amazonaws.com, *.cotssl.net, & *.edgekey.net. |
November 11, 2014 |
Yammer: Added ajax.googleapis.com, *.crocodoc.com which are used to support the viewing of uploaded documents, video, & images. |
November 25, 2014 |
Lync Online: Added several smaller subnets (23.103.129.0/25, 23.103.130.128/26, 132.245.0.0/24, 132.245.1.0/25, 132.245.112.0/24, 132.245.113.0/25, 132.245.128.0/24, 132.245.129.0/25, 132.245.161.0/24, 132.245.162.0/25, 132.245.192.0/24, 132.245.193.0/25, 132.245.208.0/24, 132.245.209.0/25, 157.56.135.64/26, 157.56.135.160/27, 157.56.184.224/27, 157.56.185.0/26, 134.170.53.32/27, 134.170.54.0/26, 134.170.54.128/25, 134.170.113.192/26, 134.170.115.0/27, 134.170.115.128/25, 191.232.83.32/27). |
November 25, 2014 |
Office Online: Added IPv4 & IPv6 (23.103.183.0/26) & (2a01:111:f406:1c01::/64 & 2a01:111:f406:b401::/64). |
November 25, 2014 |
Exchange Online: Added IPv4 & IPv6 (23.103.160.0/20) & (2a01:111:f400::/48). |
December 9, 2014 |
Lync Online: Added subnets to support new datacenters (23.103.128.0/25, 23.103.128.128/25, 23.103.130.0/26, 23.103.130.64/26, 191.232.80.96/27, 191.232.83.0/27). |
December 16, 2014 |
Lync Online: Added subnets to support new datacenters (66.119.157.0/25, 66.119.157.192/26, 2a01:111:2035:6::/64, 2a01:111:2035:7::/64). |
December 16, 2014 |
Exchange Online Protection: Important update to the EOP IP list (23.103.132.0/23, 23.103.134.0/23, 23.103.144.0/19, 23.103.191.0/24, 23.103.198.0/23, 23.103.200.0/21, 23.130.156.0/22, 64.4.22.64/26, 65.55.169.0/24, 65.55.83.128/27, 104.47.0.0/17, 134.170.132.0/24, 134.170.140.0/24, 134.170.171.0/24, 157.55.133.160/27, 157.55.158.0/23, 157.55.234.0/24, 157.55.206.0/23, 157.56.73.0/24, 157.56.87.192/26, 157.56.108.0/24, 157.56.110.0/24, 157.56.111.0/24, 157.56.112.0/24, 157.56.206.0/24, 157.56.208.0/22, 207.46.100.0/24, 207.46.101.128/26 & 2a01:111:f400:fc00::/54). |
January 13, 2015 |
Exchange Online Protection: Minor adjustments to the list published in December (23.103.132.0/23 -> change to 23.103.132.0/22, 23.103.134.0/23 -> remove (included in other ranges), 23.103.144.0/19 -> change to 23.103.144.0/22, 23.130.156.0/22 -> change to 23.103.136.0/21). |
January 27, 2015 |
Lync Online: Added subnet to support new datacenters (66.119.158.0/25). |
March 2015 |
Going forward all changes will be tracked in the RSS feed and this page will no longer be maintained. For a list of changes and their dates, please see the RSS feed. |