Microsoft 365 publishes 93 IP ranges.
Short answer
Microsoft 365’s endpoints web service lists the addresses used by Exchange Online, SharePoint and OneDrive, Teams (Skype) and common services, with a version number that changes when the list does.
What it’s for
Use it to let Microsoft 365 traffic bypass proxies or to allow it through a firewall, as Microsoft recommends.
Sub-lists
Microsoft 365 Common and Office Online · 40Exchange Online · 34SharePoint Online and OneDrive for Business · 10Microsoft Teams · 9
Sub-lists with a written explanation are described on their own page.
Prefixes
What changed
No prefixes added or removed since we started tracking this list. Changes appear here the day after the provider publishes them.
Allowlist formats
nginx (first 5 prefixes)
allow 104.146.128.0/17; allow 104.47.0.0/17; allow 13.107.128.0/22; allow 13.107.136.0/22; allow 13.107.140.6/32; deny all;
iptables (first 5 prefixes)
iptables -A INPUT -s 104.146.128.0/17 -j ACCEPT iptables -A INPUT -s 104.47.0.0/17 -j ACCEPT iptables -A INPUT -s 13.107.128.0/22 -j ACCEPT iptables -A INPUT -s 13.107.136.0/22 -j ACCEPT iptables -A INPUT -s 13.107.140.6/32 -j ACCEPT
Generate the full list from the CSV, and refresh it on a schedule: providers add and retire prefixes often.
Sources
- Microsoft 365: published IP ranges · checked 6 Nov 2026
- Microsoft 365 documentation