URLs added · live from 13 Sep 2026
*.static.microsoft*.usercontent.microsoft
- expressroute: — →
False - category: — →
Default - required: — →
True - tcpports: — →
443 - udpports: — →
443 - servicearea: — →
Common
Ports: TCP 443 · UDP 443
endpoints.office.com · Worldwide
Microsoft 365 network endpoints
Every change to the Microsoft 365 URLs and IP ranges for firewalls and proxy servers, per version: what was added and when it goes live, what was removed and what moved. Checked every hour.
Current version: 2026081400 (14 Aug 2026) · 63 endpoint sets · 199 URLs · 129 IP ranges · Checked: 15 okt 2026, 12:33 CEST
What do you need to do?
- Added: Microsoft publishes new URLs and IP ranges 30 days before they go into use. Add them to your firewall, proxy or bypass lists before the "live from" date, or users behind those devices can hit an outage.
- Removed: you can take them out of your lists; there is no deadline.
- Moved or changed: usually no action, unless you filter on category (Optimize, Allow, Default) or ports.
No changes match these filters.
Version 2026081400 · 14 Aug 2026 2
Added 2 URLs; removed 2 URLs
URLs removed
*.static.microsoft*.usercontent.microsoft
Ports: TCP 443 · UDP 443
Version 2026073100 · 31 Jul 2026 1
Removed 1 URL
URLs removed
www.acompli.com
- expressroute:
False→ — - category:
Default→ — - notes:
Outlook for Android and iOS: Outlook Privacy→ — - required:
False→ — - tcpports:
443→ — - servicearea:
Common→ —
Version 2026052900 · 29 May 2026 1
Removed 1 URL
URLs removed
officecdn.microsoft.com.edgesuite.net
Ports: TCP 80,443
Version 2026043000 · 30 Apr 2026 1
Removed 2 URLs
URLs removed
*.search.production.emea.trafficmanager.net*.search.production.us.trafficmanager.net
- expressroute:
False→ — - category:
Default→ — - notes:
SharePoint Hybrid Search - Endpoint to SearchContentService where the hybrid crawler feeds documents→ — - required:
False→ — - tcpports:
443→ — - servicearea:
SharePoint→ —
Version 2026033100 · 31 Mar 2026 1
Removed 1 URL
URLs removed
*.search.production.apac.trafficmanager.net
Current endpoints per service
The full list of version 2026081400. Optimize and Allow should bypass the proxy; Default can go through it.
Exchange Online 5
| ID | Category | Ports | URLs | IP ranges |
|---|---|---|---|---|
| 1 | Optimize ExpressRoute |
TCP 80,443 UDP 443 |
outlook.cloud.microsoft outlook.office.com outlook.office365.com |
27 ranges13.107.6.152/31 13.107.18.10/31 13.107.128.0/22 23.103.160.0/20 40.96.0.0/13 40.104.0.0/15 52.96.0.0/14 131.253.33.215/32 132.245.0.0/16 150.171.32.0/22 204.79.197.215/32 2603:1006::/40 2603:1016::/36 2603:1026::/36 2603:1036::/36 2603:1046::/36 2603:1056::/36 2620:1ec:4::152/128 2620:1ec:4::153/128 2620:1ec:c::10/128 2620:1ec:c::11/128 2620:1ec:d::10/128 2620:1ec:d::11/128 2620:1ec:8f0::/46 2620:1ec:900::/46 2620:1ec:a92::152/128 2620:1ec:a92::153/128 |
| 2 optional |
Allow ExpressRoute |
TCP 143, 587, 993, 995 | outlook.office365.com smtp.office365.com |
27 ranges13.107.6.152/31 13.107.18.10/31 13.107.128.0/22 23.103.160.0/20 40.96.0.0/13 40.104.0.0/15 52.96.0.0/14 131.253.33.215/32 132.245.0.0/16 150.171.32.0/22 204.79.197.215/32 2603:1006::/40 2603:1016::/36 2603:1026::/36 2603:1036::/36 2603:1046::/36 2603:1056::/36 2620:1ec:4::152/128 2620:1ec:4::153/128 2620:1ec:c::10/128 2620:1ec:c::11/128 2620:1ec:d::10/128 2620:1ec:d::11/128 2620:1ec:8f0::/46 2620:1ec:900::/46 2620:1ec:a92::152/128 2620:1ec:a92::153/128 |
| 8 | Default | TCP 80,443 | *.outlook.com autodiscover.*.onmicrosoft.com |
— |
| 9 | Allow ExpressRoute |
TCP 443 | *.protection.outlook.com |
40.92.0.0/15 40.107.0.0/16 52.100.0.0/14 52.238.78.88/32 104.47.0.0/17 2a01:111:f400::/48 2a01:111:f403::/48 |
| 10 | Allow ExpressRoute |
TCP 25 | *.mail.protection.outlook.com *.mx.microsoft |
40.92.0.0/15 40.107.0.0/16 52.100.0.0/14 104.47.0.0/17 2a01:111:f400::/48 2a01:111:f403::/48 |
Microsoft Teams 7
| ID | Category | Ports | URLs | IP ranges |
|---|---|---|---|---|
| 11 | Optimize ExpressRoute |
UDP 3478,3479,3480,3481 |
— | 52.112.0.0/14 52.122.0.0/15 2603:1063::/38 |
| 12 | Allow ExpressRoute |
TCP 80,443 UDP 443 |
*.lync.com *.teams.cloud.microsoft *.teams.microsoft.com teams.cloud.microsoft teams.microsoft.com |
9 ranges52.112.0.0/14 52.122.0.0/15 2603:1027::/48 2603:1037::/48 2603:1047::/48 2603:1057::/48 2603:1063::/38 2620:1ec:6::/48 2620:1ec:40::/42 |
| 16 | Default | TCP 443 | *.keydelivery.mediaservices.windows.net *.streaming.mediaservices.windows.net |
— |
| 17 | Default | TCP 443 | aka.ms |
— |
| 19 optional |
Default | TCP 80,443 | adl.windows.com |
— |
| 27 | Default | TCP 443 | join.secure.skypeassets.com mlccdnprod.azureedge.net |
— |
| 127 | Default | TCP 80,443 | *.skype.com |
— |
SharePoint Online and OneDrive 6
| ID | Category | Ports | URLs | IP ranges |
|---|---|---|---|---|
| 31 | Optimize ExpressRoute |
TCP 80,443 UDP 443 |
*.sharepoint.com |
10 ranges13.107.136.0/22 40.108.128.0/17 52.104.0.0/14 104.146.128.0/17 150.171.40.0/22 2603:1061:1300::/40 2603:1063:6000::/35 2620:1ec:8f8::/46 2620:1ec:908::/46 2a01:111:f402::/48 |
| 32 optional |
Default | TCP 443 | storage.live.com |
— |
| 35 | Default | TCP 80,443 | *.wns.windows.com admin.onedrive.com officeclient.microsoft.com |
— |
| 36 | Default | TCP 80,443 | g.live.com oneclient.sfx.ms |
— |
| 37 | Default | TCP 80,443 | *.sharepointonline.com spoprod-a.akamaihd.net |
— |
| 39 | Default | TCP 80,443 | *.svc.ms |
— |
Microsoft 365 Common 45
| ID | Category | Ports | URLs | IP ranges |
|---|---|---|---|---|
| 46 | Allow ExpressRoute |
TCP 80,443 | *.officeapps.live.com *.online.office.com office.live.com |
20 ranges13.107.6.171/32 13.107.18.15/32 13.107.140.6/32 52.108.0.0/14 52.244.37.168/32 2603:1006:1400::/40 2603:1016:2400::/40 2603:1026:2400::/40 2603:1036:2400::/40 2603:1046:1400::/40 2603:1056:1400::/40 2603:1063:2000::/38 2620:1ec:c::15/128 2620:1ec:8fc::6/128 2620:1ec:a92::171/128 2a01:111:f100:2000::a83e:3019/128 2a01:111:f100:2002::8975:2d79/128 2a01:111:f100:2002::8975:2da8/128 2a01:111:f100:7000::6fdd:6cd5/128 2a01:111:f100:a004::bfeb:88cf/128 |
| 47 | Default | TCP 443,80 UDP 443 |
*.office.net |
— |
| 49 | Default | TCP 443 | *.onenote.com |
— |
| 50 optional |
Default | TCP 443 | *.microsoft.com |
— |
| 51 | Default | TCP 443 | *cdn.onenote.net |
— |
| 53 | Default | TCP 443 | ajax.aspnetcdn.com apis.live.net officeapps.live.com www.onedrive.com |
— |
| 56 | Allow ExpressRoute |
TCP 80,443 | *.auth.microsoft.com *.msftidentity.com *.msidentity.com account.activedirectory.windowsazure.com accounts.accesscontrol.windows.net adminwebservice.microsoftonline.com api.passwordreset.microsoftonline.com autologon.microsoftazuread-sso.com becws.microsoftonline.com ccs.login.microsoftonline.com clientconfig.microsoftonline-p.net companymanager.microsoftonline.com device.login.microsoftonline.com graph.microsoft.com graph.windows.net login-us.microsoftonline.com login.microsoft.com login.microsoftonline-p.com login.microsoftonline.com login.windows.net logincert.microsoftonline.com loginex.microsoftonline.com nexus.microsoftonline-p.com passwordreset.microsoftonline.com provisioningapi.microsoftonline.com |
16 ranges20.20.32.0/19 20.190.128.0/18 20.231.128.0/19 40.126.0.0/18 2603:1006:2000::/48 2603:1007:200::/48 2603:1016:1400::/48 2603:1017::/48 2603:1026:3000::/48 2603:1027:1::/48 2603:1036:3000::/48 2603:1037:1::/48 2603:1046:2000::/48 2603:1047:1::/48 2603:1056:2000::/48 2603:1057:2::/48 |
| 59 | Default | TCP 80,443 | *.hip.live.com *.microsoftonline-p.com *.microsoftonline.com *.msauth.net *.msauthimages.net *.msecnd.net *.msftauth.net *.msftauthimages.net *.phonefactor.net enterpriseregistration.windows.net |
— |
| 64 | Allow ExpressRoute |
TCP 443 | *.protection.office.com *.security.microsoft.com compliance.microsoft.com defender.microsoft.com protection.office.com purview.microsoft.com security.microsoft.com |
13.107.6.192/32 13.107.9.192/32 2620:1ec:4::192/128 2620:1ec:a92::192/128 |
| 66 | Default | TCP 443 | *.portal.cloudappsecurity.com |
— |
| 69 | Default | TCP 443 | *.aria.microsoft.com *.events.data.microsoft.com |
— |
| 70 | Default | TCP 443 | *.o365weve.com amp.azure.net appsforoffice.microsoft.com assets.onestore.ms auth.gfx.ms c1.microsoft.com dgps.support.microsoft.com docs.microsoft.com msdn.microsoft.com platform.linkedin.com prod.msocdn.com shellprod.msocdn.com support.microsoft.com technet.microsoft.com |
— |
| 71 | Default | TCP 443,80 | *.office365.com |
— |
| 73 | Default | TCP 443 | *.aadrm.com *.azurerms.com *.informationprotection.azure.com ecn.dev.virtualearth.net informationprotection.hosting.portal.azure.net |
— |
| 75 optional |
Default | TCP 443 | *.sharepointonline.com dc.services.visualstudio.com mem.gfx.ms |
— |
| 78 optional |
Default | TCP 80,443 | *.microsoft.com *.msocdn.com *.onmicrosoft.com |
— |
| 79 | Default | TCP 80,443 | o15.officeredir.microsoft.com officepreviewredir.microsoft.com officeredir.microsoft.com r.office.microsoft.com |
— |
| 83 | Default | TCP 443 | activation.sls.microsoft.com |
— |
| 84 | Default | TCP 80,443 | crl.microsoft.com |
— |
| 86 | Default | TCP 443 | office15client.microsoft.com officeclient.microsoft.com |
— |
| 89 | Default | TCP 80,443 | go.microsoft.com |
— |
| 91 | Default | TCP 80,443 | ajax.aspnetcdn.com cdn.odc.officeapps.live.com |
— |
| 92 | Default | TCP 80,443 | officecdn.microsoft.com otelrules.azureedge.net |
— |
| 93 optional |
Default | TCP 80,443 | *.virtualearth.net c.bing.net ocos-office365-s2s.msedge.net tse1.mm.bing.net www.bing.com |
— |
| 95 optional |
Default | TCP 443 | *.acompli.net *.outlookmobile.com |
— |
| 96 optional |
Default | TCP 443 | login.windows-ppe.net |
— |
| 97 optional |
Default | TCP 443 | account.live.com login.live.com |
— |
| 114 optional |
Default | TCP 80,443 | *.appex-rf.msn.com *.appex.bing.com c.bing.com c.live.com partnerservices.getmicrosoftkey.com signup.live.com |
— |
| 116 optional |
Default | TCP 80,443 | account.live.com auth.gfx.ms login.live.com |
— |
| 117 optional |
Default | TCP 443 | *.yammer.com *.yammerusercontent.com |
— |
| 118 optional |
Default | TCP 443 | *.assets-yammer.com |
— |
| 121 optional |
Default | TCP 80,443 | www.outlook.com |
— |
| 122 optional |
Default | TCP 443 | eus-www.sway-cdn.com eus-www.sway-extensions.com wus-www.sway-cdn.com wus-www.sway-extensions.com |
— |
| 124 optional |
Default | TCP 443 | sway.com www.sway.com |
— |
| 125 | Default | TCP 80,443 | *.entrust.net *.geotrust.com *.omniroot.com *.public-trust.com *.symcb.com *.symcd.com *.verisign.com *.verisign.net cacerts.digicert.com cert.int-x3.letsencrypt.org crl.globalsign.com crl.globalsign.net crl.identrust.com crl3.digicert.com crl4.digicert.com isrg.trustid.ocsp.identrust.com mscrl.microsoft.com ocsp.digicert.com ocsp.globalsign.com ocsp.msocsp.com ocsp2.globalsign.com ocspx.digicert.com oneocsp.microsoft.com secure.globalsign.com www.digicert.com www.microsoft.com |
— |
| 126 optional |
Default | TCP 443 | officespeech.platform.bing.com |
— |
| 147 | Default | TCP 80,443 | *.office.com www.microsoft365.com |
— |
| 152 optional |
Default | TCP 443 | *.microsoftusercontent.com |
— |
| 153 | Default | TCP 443 | *.azure-apim.net *.flow.microsoft.com *.powerapps.com *.powerautomate.com |
— |
| 156 | Default | TCP 443 | *.activity.windows.com activity.windows.com |
— |
| 158 | Default | TCP 443 | *.cortana.ai |
— |
| 159 | Default | TCP 80,443 | admin.microsoft.com |
— |
| 160 | Default | TCP 80,443 | cdn.odc.officeapps.live.com cdn.uci.officeapps.live.com |
— |
| 184 | Default | TCP 443 UDP 443 |
*.cloud.microsoft |
— |
| 193 | Default | TCP 443 UDP 443 |
*.static.microsoft *.usercontent.microsoft |
— |
Source: the Microsoft 365 IP Address and URL web service (endpoints.office.com, Worldwide). Data © Microsoft. Always configure from Microsoft's current list; see Microsoft 365 URLs and IP address ranges.
