chg: [office365] IP addresses and domains updated

pull/123/head
Alexandre Dulaunoy 2019-12-12 07:45:48 +01:00
parent 8c591a8fad
commit 6351521254
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
2 changed files with 38 additions and 95 deletions

View File

@ -1,22 +1,13 @@
{ {
"description": "Office 365 IP address ranges", "description": "Office 365 URLs and IP address ranges",
"list": [ "list": [
"104.146.128.0/17", "104.146.128.0/17",
"104.210.208.16/29",
"104.210.48.8/29",
"104.211.16.16/29",
"104.211.48.16/29",
"104.214.107.57/32",
"104.215.11.144/32", "104.215.11.144/32",
"104.215.62.195/32", "104.215.62.195/32",
"104.215.96.24/29",
"104.41.13.120/29",
"104.42.230.91/32", "104.42.230.91/32",
"104.42.72.16/29",
"104.44.218.128/25", "104.44.218.128/25",
"104.44.254.128/25", "104.44.254.128/25",
"104.44.255.0/25", "104.44.255.0/25",
"104.45.208.104/29",
"104.47.0.0/17", "104.47.0.0/17",
"13.106.4.128/25", "13.106.4.128/25",
"13.106.56.0/25", "13.106.56.0/25",
@ -37,16 +28,11 @@
"13.73.1.120/32", "13.73.1.120/32",
"13.75.126.169/32", "13.75.126.169/32",
"13.80.125.22/32", "13.80.125.22/32",
"13.84.178.101/32",
"13.89.240.113/32", "13.89.240.113/32",
"13.91.91.243/32", "13.91.91.243/32",
"131.253.33.215/32", "131.253.33.215/32",
"132.245.0.0/16", "132.245.0.0/16",
"134.170.116.0/25",
"134.170.165.0/25",
"134.170.172.128/25", "134.170.172.128/25",
"134.170.200.0/21",
"134.170.208.0/21",
"134.170.67.0/25", "134.170.67.0/25",
"138.91.237.237/32", "138.91.237.237/32",
"150.171.32.0/22", "150.171.32.0/22",
@ -56,28 +42,22 @@
"157.55.155.0/25", "157.55.155.0/25",
"157.55.227.192/26", "157.55.227.192/26",
"157.55.45.128/25", "157.55.45.128/25",
"157.55.59.128/25",
"157.56.151.0/25",
"157.56.58.0/25",
"191.232.0.0/23",
"191.232.2.128/25", "191.232.2.128/25",
"191.234.140.0/22", "191.234.140.0/22",
"191.237.248.32/29",
"191.237.252.192/28",
"20.190.128.0/18", "20.190.128.0/18",
"2001:df0:d9:200::/64", "2001:df0:d9:200::/64",
"204.79.197.215/32", "204.79.197.215/32",
"23.100.120.64/29",
"23.100.16.168/29",
"23.100.32.136/29",
"23.100.72.32/29",
"23.101.165.168/29",
"23.101.181.128/29",
"23.103.160.0/20", "23.103.160.0/20",
"2603:1006:1400::/40",
"2603:1006:2000::/48",
"2603:1006::/40", "2603:1006::/40",
"2603:1007:200::/48",
"2603:1010:200::c7/128", "2603:1010:200::c7/128",
"2603:1010:2::cb/128", "2603:1010:2::cb/128",
"2603:1016::/40", "2603:1016:1400::/48",
"2603:1016:2400::/40",
"2603:1016::/36",
"2603:1017::/48",
"2603:1020:0:7::19c/128", "2603:1020:0:7::19c/128",
"2603:1020:0:7::4e1/128", "2603:1020:0:7::4e1/128",
"2603:1020:200::682f:a0fd/128", "2603:1020:200::682f:a0fd/128",
@ -91,6 +71,7 @@
"2603:1020:300::33/128", "2603:1020:300::33/128",
"2603:1020:400::26/128", "2603:1020:400::26/128",
"2603:1020:600::1d3/128", "2603:1020:600::1d3/128",
"2603:1020:600::1f0/128",
"2603:1020:600::21f/128", "2603:1020:600::21f/128",
"2603:1020:600::a1/128", "2603:1020:600::a1/128",
"2603:1020:700::1cb/128", "2603:1020:700::1cb/128",
@ -98,15 +79,10 @@
"2603:1020:700::a2/128", "2603:1020:700::a2/128",
"2603:1020:800:2::6/128", "2603:1020:800:2::6/128",
"2603:1020:900::8/128", "2603:1020:900::8/128",
"2603:1026:200::/39", "2603:1026:2400::/40",
"2603:1026:400::/39", "2603:1026:3000::/48",
"2603:1026:600::/44", "2603:1026::/36",
"2603:1026:620::/44", "2603:1027:1::/48",
"2603:1026:630::/44",
"2603:1026:800::/44",
"2603:1026:820::/45",
"2603:1026:830::/44",
"2603:1026::/40",
"2603:1027::/48", "2603:1027::/48",
"2603:1030:1000::21a/128", "2603:1030:1000::21a/128",
"2603:1030:603::3c9/128", "2603:1030:603::3c9/128",
@ -117,15 +93,11 @@
"2603:1030:a02::118/128", "2603:1030:a02::118/128",
"2603:1030:a02::367/128", "2603:1030:a02::367/128",
"2603:1030:f00::17/128", "2603:1030:f00::17/128",
"2603:1036:200::/40", "2603:1036:2400::/40",
"2603:1036:400::/40", "2603:1036:3000::/48",
"2603:1036:600::/40", "2603:1036::/36",
"2603:1036:800::/38", "2603:1037:1::/48",
"2603:1036::/39",
"2603:1036:c00::/40",
"2603:1037::/48", "2603:1037::/48",
"2603:1039:1001::/48",
"2603:1039:e01::/48",
"2603:1040:200::111/128", "2603:1040:200::111/128",
"2603:1040:200::325/128", "2603:1040:200::325/128",
"2603:1040:200::4f3/128", "2603:1040:200::4f3/128",
@ -147,14 +119,17 @@
"2603:1040:c01::28/128", "2603:1040:c01::28/128",
"2603:1040:e00:1::2f/128", "2603:1040:e00:1::2f/128",
"2603:1040:f00::1f/128", "2603:1040:f00::1f/128",
"2603:1046:900::/40", "2603:1046:1400::/40",
"2603:1046::/37", "2603:1046:2000::/48",
"2603:1046::/36",
"2603:1047:100::/64", "2603:1047:100::/64",
"2603:1047:1::/48",
"2603:1047::/48", "2603:1047::/48",
"2603:1050:1::cd/128", "2603:1050:1::cd/128",
"2603:1056:400::/40", "2603:1056:1400::/40",
"2603:1056:600::/40", "2603:1056:2000::/48",
"2603:1056::/40", "2603:1056::/36",
"2603:1057:2::/48",
"2603:1057::/48", "2603:1057::/48",
"2603:1096:400::/40", "2603:1096:400::/40",
"2603:1096:600::/40", "2603:1096:600::/40",
@ -175,7 +150,6 @@
"2620:1ec:8fc::6/128", "2620:1ec:8fc::6/128",
"2620:1ec:900::/46", "2620:1ec:900::/46",
"2620:1ec:908::/46", "2620:1ec:908::/46",
"2620:1ec:a92::150/128",
"2620:1ec:a92::152/128", "2620:1ec:a92::152/128",
"2620:1ec:a92::153/128", "2620:1ec:a92::153/128",
"2620:1ec:a92::171/128", "2620:1ec:a92::171/128",
@ -255,7 +229,6 @@
"2a01:111:f102:8001::1761:4237/128", "2a01:111:f102:8001::1761:4237/128",
"2a01:111:f102:8001::1761:4daf/128", "2a01:111:f102:8001::1761:4daf/128",
"2a01:111:f102:8001::1761:4f8a/128", "2a01:111:f102:8001::1761:4f8a/128",
"2a01:111:f400:7c00::/54",
"2a01:111:f400::/48", "2a01:111:f400::/48",
"2a01:111:f402::/48", "2a01:111:f402::/48",
"2a01:111:f403::/48", "2a01:111:f403::/48",
@ -273,11 +246,8 @@
"40.104.0.0/15", "40.104.0.0/15",
"40.107.0.0/16", "40.107.0.0/16",
"40.108.128.0/17", "40.108.128.0/17",
"40.114.120.16/29",
"40.126.0.0/18", "40.126.0.0/18",
"40.69.185.117/32",
"40.81.156.154/32", "40.81.156.154/32",
"40.83.127.89/32",
"40.90.218.198/32", "40.90.218.198/32",
"40.92.0.0/15", "40.92.0.0/15",
"40.96.0.0/13", "40.96.0.0/13",
@ -289,10 +259,6 @@
"52.108.0.0/14", "52.108.0.0/14",
"52.112.0.0/14", "52.112.0.0/14",
"52.163.126.215/32", "52.163.126.215/32",
"52.164.121.65/32",
"52.164.124.124/32",
"52.164.127.6/32",
"52.168.128.89/32",
"52.170.21.67/32", "52.170.21.67/32",
"52.172.185.18/32", "52.172.185.18/32",
"52.174.56.180/32", "52.174.56.180/32",
@ -300,7 +266,6 @@
"52.178.94.2/32", "52.178.94.2/32",
"52.183.75.62/32", "52.183.75.62/32",
"52.184.165.82/32", "52.184.165.82/32",
"52.225.223.43/32",
"52.228.25.96/32", "52.228.25.96/32",
"52.238.106.116/32", "52.238.106.116/32",
"52.238.119.141/32", "52.238.119.141/32",
@ -309,17 +274,14 @@
"52.244.160.207/32", "52.244.160.207/32",
"52.247.150.191/32", "52.247.150.191/32",
"52.96.0.0/14", "52.96.0.0/14",
"65.52.1.16/29", "65.54.170.128/25"
"65.52.193.136/29",
"65.54.170.128/25",
"70.37.154.128/25"
], ],
"matching_attributes": [ "matching_attributes": [
"ip-src", "ip-src",
"ip-dst", "ip-dst",
"domain|ip" "domain|ip"
], ],
"name": "List of known Office 365 IP", "name": "List of known Office 365 IP address ranges",
"type": "cidr", "type": "cidr",
"version": 20190310 "version": 20191212
} }

View File

@ -1,11 +1,10 @@
{ {
"description": "Office 365 URLs", "description": "Office 365 URLs and IP address ranges",
"list": [ "list": [
"-files.sharepoint.com", "-files.sharepoint.com",
"-myfiles.sharepoint.com", "-myfiles.sharepoint.com",
".aadrm.com", ".aadrm.com",
".acompli.net", ".acompli.net",
".adhybridhealth.azure.com",
".adl.windows.com", ".adl.windows.com",
".api.microsoftstream.com", ".api.microsoftstream.com",
".appex-rf.msn.com", ".appex-rf.msn.com",
@ -33,10 +32,10 @@
".mail.protection.outlook.com", ".mail.protection.outlook.com",
".manage.microsoft.com", ".manage.microsoft.com",
".manage.office.com", ".manage.office.com",
".measure.office.com",
".media.azure.net", ".media.azure.net",
".microsoft.com", ".microsoft.com",
".microsoftonline-p.com", ".microsoftonline-p.com",
".microsoftonline-p.net",
".microsoftonline.com", ".microsoftonline.com",
".msappproxy.net", ".msappproxy.net",
".msauth.net", ".msauth.net",
@ -45,6 +44,8 @@
".msedge.net", ".msedge.net",
".msftauth.net", ".msftauth.net",
".msftauthimages.net", ".msftauthimages.net",
".msftidentity.com",
".msidentity.com",
".msocdn.com", ".msocdn.com",
".mstea.ms", ".mstea.ms",
".notification.api.microsoftstream.com", ".notification.api.microsoftstream.com",
@ -55,22 +56,20 @@
".officeconfig.msocdn.com", ".officeconfig.msocdn.com",
".omniroot.com", ".omniroot.com",
".onenote.com", ".onenote.com",
".online.office.com",
".onmicrosoft.com", ".onmicrosoft.com",
".outlook.com", ".outlook.com",
".outlook.office.com", ".outlook.office.com",
".outlookmobile.com", ".outlookmobile.com",
".outlookmobile.us",
".phonefactor.net", ".phonefactor.net",
".portal.cloudappsecurity.com", ".portal.cloudappsecurity.com",
".protection.office.com", ".protection.office.com",
".protection.outlook.com", ".protection.outlook.com",
".public-trust.com", ".public-trust.com",
".queue.core.windows.net",
".search.production.apac.trafficmanager.net", ".search.production.apac.trafficmanager.net",
".search.production.emea.trafficmanager.net", ".search.production.emea.trafficmanager.net",
".search.production.us.trafficmanager.net", ".search.production.us.trafficmanager.net",
".secure.skypeassets.com", ".secure.skypeassets.com",
".servicebus.windows.net",
".sfbassets.com", ".sfbassets.com",
".sharepoint.com", ".sharepoint.com",
".sharepointonline.com", ".sharepointonline.com",
@ -81,14 +80,13 @@
".svc.ms", ".svc.ms",
".symcb.com", ".symcb.com",
".symcd.com", ".symcd.com",
".table.core.windows.net",
".teams.microsoft.com", ".teams.microsoft.com",
".tenor.com", ".tenor.com",
".urlp.sfbassets.com", ".urlp.sfbassets.com",
".users.storage.live.com", ".users.storage.live.com",
".verisign.com", ".verisign.com",
".verisign.net", ".verisign.net",
".windows.net", ".wns.windows.com",
".yammer.com", ".yammer.com",
".yammerusercontent.com", ".yammerusercontent.com",
"a.wunderlist.com", "a.wunderlist.com",
@ -115,7 +113,6 @@
"api.diagnostics.office.com", "api.diagnostics.office.com",
"api.dropboxapi.com", "api.dropboxapi.com",
"api.localytics.com", "api.localytics.com",
"api.login.microsoftonline.com",
"api.login.yahoo.com", "api.login.yahoo.com",
"api.meetup.com", "api.meetup.com",
"api.microsoftstream.com", "api.microsoftstream.com",
@ -169,7 +166,6 @@
"crl.microsoft.com", "crl.microsoft.com",
"crl3.digicert.com", "crl3.digicert.com",
"crl4.digicert.com", "crl4.digicert.com",
"cus-000.tasks.osi.office.net",
"d.docs.live.net", "d.docs.live.net",
"data.flurry.com", "data.flurry.com",
"dc.applicationinsights.microsoft.com", "dc.applicationinsights.microsoft.com",
@ -182,14 +178,12 @@
"docs.live.net", "docs.live.net",
"docs.microsoft.com", "docs.microsoft.com",
"ea-000.forms.osi.office.net", "ea-000.forms.osi.office.net",
"ea-000.tasks.osi.office.net",
"ecn.dev.virtualearth.net", "ecn.dev.virtualearth.net",
"en-us.appex-rf.msn.com", "en-us.appex-rf.msn.com",
"enterpriseregistration.windows.net", "enterpriseregistration.windows.net",
"eur.delve.office.com", "eur.delve.office.com",
"eus-www.sway-cdn.com", "eus-www.sway-cdn.com",
"eus-www.sway-extensions.com", "eus-www.sway-extensions.com",
"eus-zzz.tasks.osi.office.net",
"eus2-000.forms.osi.office.net", "eus2-000.forms.osi.office.net",
"evintl-aia.verisign.com", "evintl-aia.verisign.com",
"evintl-crl.verisign.com", "evintl-crl.verisign.com",
@ -210,8 +204,6 @@
"graph.facebook.com", "graph.facebook.com",
"graph.microsoft.com", "graph.microsoft.com",
"graph.windows.net", "graph.windows.net",
"hip.microsoftonline-p.net",
"hipservice.microsoftonline.com",
"home.office.com", "home.office.com",
"ind.delve.office.com", "ind.delve.office.com",
"informationprotection.hosting.portal.azure.net", "informationprotection.hosting.portal.azure.net",
@ -240,12 +232,10 @@
"mlccdn.blob.core.windows.net", "mlccdn.blob.core.windows.net",
"mlccdnprod.azureedge.net", "mlccdnprod.azureedge.net",
"mrodevicemgr.officeapps.live.com", "mrodevicemgr.officeapps.live.com",
"ms.tific.com",
"mscrl.microsoft.com", "mscrl.microsoft.com",
"msdn.microsoft.com", "msdn.microsoft.com",
"nam.delve.office.com", "nam.delve.office.com",
"neu-000.forms.osi.office.net", "neu-000.forms.osi.office.net",
"neu-000.tasks.osi.office.net",
"nexus.microsoftonline-p.com", "nexus.microsoftonline-p.com",
"nexus.officeapps.live.com", "nexus.officeapps.live.com",
"nexusrules.officeapps.live.com", "nexusrules.officeapps.live.com",
@ -318,13 +308,8 @@
"s2.symcb.com", "s2.symcb.com",
"sa.symcb.com", "sa.symcb.com",
"sas.office.microsoft.com", "sas.office.microsoft.com",
"scsinstrument-ss-us.trafficmanager.net",
"scsquery-ss-asia.trafficmanager.net",
"scsquery-ss-eu.trafficmanager.net",
"scsquery-ss-us.trafficmanager.net",
"sd.symcb.com", "sd.symcb.com",
"sdk.hockeyapp.net", "sdk.hockeyapp.net",
"sea-000.tasks.osi.office.net",
"secure.aadcdn.microsoftonline-p.com", "secure.aadcdn.microsoftonline-p.com",
"secure.globalsign.com", "secure.globalsign.com",
"secure.meetup.com", "secure.meetup.com",
@ -333,7 +318,6 @@
"shellprod.msocdn.com", "shellprod.msocdn.com",
"signup.live.com", "signup.live.com",
"signup.microsoft.com", "signup.microsoft.com",
"skydrive.wns.windows.com",
"skypemaprdsitus.trafficmanager.net", "skypemaprdsitus.trafficmanager.net",
"smtp.office365.com", "smtp.office365.com",
"social.yahooapis.com", "social.yahooapis.com",
@ -346,6 +330,7 @@
"staffhub.uservoice.com", "staffhub.uservoice.com",
"staffhubweb.azureedge.net", "staffhubweb.azureedge.net",
"static.sharepointonline.com", "static.sharepointonline.com",
"statics.teams.microsoft.com",
"storage.live.com", "storage.live.com",
"store.office.com", "store.office.com",
"su.symcb.com", "su.symcb.com",
@ -367,7 +352,6 @@
"uci.officeapps.live.com", "uci.officeapps.live.com",
"vassg142.crl.omniroot.com", "vassg142.crl.omniroot.com",
"vassg142.ocsp.omniroot.com", "vassg142.ocsp.omniroot.com",
"video.osi.office.net",
"videocontent.osi.office.net", "videocontent.osi.office.net",
"videoplayercdn.osi.office.net", "videoplayercdn.osi.office.net",
"view.atdmt.com", "view.atdmt.com",
@ -382,14 +366,11 @@
"webanalytics.localytics.com", "webanalytics.localytics.com",
"webshell.suite.office.com", "webshell.suite.office.com",
"weu-000.forms.osi.office.net", "weu-000.forms.osi.office.net",
"weu-000.tasks.osi.office.net",
"wikipedia.firstpartyapps.oaspapps.com", "wikipedia.firstpartyapps.oaspapps.com",
"word-edit.officeapps.live.com", "word-edit.officeapps.live.com",
"word-view.officeapps.live.com", "word-view.officeapps.live.com",
"wordcs.officeapps.live.com", "wordcs.officeapps.live.com",
"wu.client.hip.live.com",
"wus-000.forms.osi.office.net", "wus-000.forms.osi.office.net",
"wus-000.tasks.osi.office.net",
"wus-firstpartyapps.oaspapps.com", "wus-firstpartyapps.oaspapps.com",
"wus-www.sway-cdn.com", "wus-www.sway-cdn.com",
"wus-www.sway-extensions.com", "wus-www.sway-extensions.com",
@ -413,7 +394,7 @@
"domain|ip", "domain|ip",
"hostname" "hostname"
], ],
"name": "List of known Office 365 URLs", "name": "List of known Office 365 URLs address ranges",
"type": "substring", "type": "string",
"version": 20190310 "version": 20191212
} }