← cd ~/tools
// tools/ip-check
IP range checker
Paste the ranges from a named location (or a firewall rule) and the IP addresses from your sign-in logs. You'll see which IPs match which range, and any ranges that can't work.
Runs entirely in your browser. Nothing you paste is sent anywhere.
Entra sees the public IP your traffic leaves from, so private ranges such as 10.0.0.0/8 never match a sign-in. Read named locations in Conditional Access for the rest of the gotchas.