We are seeing incorrect geolocation details for one of our company’s public IP addresses in Microsoft Entra ID sign-in logs. Microsoft is showing logins originating from southern Ontario, Canada (the GTA), but this IP is actually assigned to our business network in Winnipeg, MB, Canada.
We have reviewed the location results of 11 geolocation providers. One of the eleven had an erroneous location that was very similar to what Azure is still returning. That location provider was notified, and published corrected results over 20 days ago. However, Microsoft Entra sign-in logs continue to show the incorrect location.
We have also previously tried creating a custom "IP address range" object via Defender Cloud Apps.
At this point, we don't know how to fix the problem.
I think we need Microsoft to update its internal geolocation mapping for this IP address.