Table of Contents

Blocklists - Microsoft - Microsoft Teams

Get Current List of IP Addresses

curl https://endpoints.office.com/endpoints/worldwide?clientrequestid=948beb0b-32bb-4e1c-a67d-091c861a0cc6 > /tmp/office.txt
jq -r '.[] | select(.serviceArea=="Skype") | select(.ips) .ips[]' /tmp/office.txt | sort -t . -k1,1n -k2,2n -k3,3n -k4,4n | uniq

NOTE: Use Skype as the ServiceArea.

See: Get Microsoft URLs, IP addresses and Ports.

returns:

13.107.64.0/18
52.112.0.0/14
52.120.0.0/14
52.238.119.141/32
52.244.160.207/32
2603:1027::/48
2603:1037::/48
2603:1047::/48
2603:1057::/48
2620:1ec:40::/42
2620:1ec:6::/48

NOTE: These IP Ranges may change.


Get Current List of URLs

jq -r '.[] | select(.serviceArea=="Skype") | select(.urls) .urls[]' /tmp/office.txt | sort -t . -k1,1n -k2,2n -k3,3n -k4,4n | uniq

returns:

*.adl.windows.com
ajax.aspnetcdn.com
aka.ms
amp.azure.net
*.broadcast.skype.com
broadcast.skype.com
compass-ssl.microsoft.com
*.keydelivery.mediaservices.windows.net
*.lync.com
mlccdn.blob.core.windows.net
mlccdnprod.azureedge.net
*.msecnd.net
*.msedge.net
*.mstea.ms
*.secure.skypeassets.com
*.sfbassets.com
*.skype.com
*.skypeforbusiness.com
skypemaprdsitus.trafficmanager.net
statics.teams.microsoft.com
*.streaming.mediaservices.windows.net
*.teams.microsoft.com
teams.microsoft.com
*.tenor.com
*.urlp.sfbassets.com
*.users.storage.live.com
videoplayercdn.osi.office.net

Get Current List of TCP Ports

jq -r '.[] | select(.serviceArea=="Skype") | .tcpPorts' office.txt | sort | uniq

returns:

443
80
null

NOTE: An alternative command:

jq -r '.[] | select(.serviceArea=="Skype") | .tcpPorts' office.txt  | sed 's/,/\n/'g | sort | uniq

Get Current List of UDP Ports

jq -r '.[] | select(.serviceArea=="Skype") | .udpPorts' office.txt  | sed 's/,/\n/'g | sort | uniq

returns:

3478
3479
3480
3481
null

NOTE: An alternative command:

jq -r '.[] | select(.serviceArea=="Skype") | .udpPorts' office.txt | sort | uniq

Original Lists

13.107.64.0/18 # Microsoft Teams.
52.112.0.0/14 # Microsoft Teams.
52.120.0.0/14 # Microsoft Teams.
*.microsoft.com
*.microsoftonline.com
*.teams.skype.com
*.teams.microsoft.com
*.sfbassets.com
*.skypeforbusiness.com

NOTE: These may change.


References

https://docs.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide

https://docs.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide#skype-for-business-online-and-microsoft-teams

https://docs.microsoft.com/en-gb/MicrosoftTeams/troubleshoot/teams-welcome

https://techcommunity.microsoft.com/t5/microsoft-teams/ports-needed-for-microsoft-teams/m-p/28417

https://docs.microsoft.com/en-gb/MicrosoftTeams/prepare-network