What an Included result means
The address is mathematically within the CIDR interval, including both endpoints. This does not prove that a device uses that subnet or that traffic will be accepted. Routing, rule order, exclusions, and application access controls still determine actual behavior.
For a firewall change, test the first and last intended addresses and nearby addresses that should remain excluded. This tool checks membership only; it does not evaluate a firewall configuration.