Share via

Incorrect geolocation on a public IP address - wrong location/region in Azure Sign-in Logs

tomw0126 5 Reputation points
2026-02-21T00:28:10.2866667+00:00

We are seeing incorrect geolocation details for one of our company’s public IP addresses in Microsoft Entra ID sign-in logs. Microsoft is showing logins originating from southern Ontario, Canada (the GTA), but this IP is actually assigned to our business network in Winnipeg, MB, Canada.

We have reviewed the location results of 11 geolocation providers. One of the eleven had an erroneous location that was very similar to what Azure is still returning. That location provider was notified, and published corrected results over 20 days ago. However, Microsoft Entra sign-in logs continue to show the incorrect location.

We have also previously tried creating a custom "IP address range" object via Defender Cloud Apps.

At this point, we don't know how to fix the problem.

I think we need Microsoft to update its internal geolocation mapping for this IP address.

Microsoft Security | Microsoft Entra | Other
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. kagiyama yutaka 1,165 Reputation points
    2026-02-21T01:51:27.0533333+00:00

    I think that Azure’s still reading a stale mmdb slice for ur /24… that shard just doesnt roll even if the upstream geo feed fixed it. u basically need MS to bump the backend ingest for that block so the geo data refreshes.


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.