Check if some IP or ip range are included in SPF Records

Check SPF for IP.ps1

$IpsToCheck = @("40.107.67.0","104.47.612.0","52.100.146.0","40.107.0.0","104.47.0.0","52.100.0.0")
$domain = "spf.protection.outlook.com"
#A better approach would be to validate if the domain is user in a primary email address
$IpMissing = @()
foreach($IpToCheck in $IpsToCheck){
    $DNS = Resolve-DnsName -Type TXT -Name $domain |where{$_.Strings -like "*v=spf1*"}
    if($DNS.strings -like "*$($IpToCheck)*"){ $DNS.strings
    }elseif($DNS.strings -like "*include:*"){
        foreach($include in $($dns.Strings.split(" ")| where {$_ -like "include:*"})){
            $tDns = Resolve-DnsName -Type TXT -Name $($include.split(":")[-1])
            if($tDNS.strings -like "*$($IpToCheck)*"){$tDNS.strings }
        }
        
    }
    $IpMissing += $IpToCheck
}
$IpMissing