internal/functions/Get-IPGeolocationIPWhois.ps1
|
<# .SYNOPSIS Get the Location of an IP using the http://ipwho.is/ API .DESCRIPTION Get the Location of an IP using the http://ipwho.is/ API .PARAMETER IPAddress IP address of geolocation .EXAMPLE Get-IPGeolocation .NOTES General notes #> Function Get-IPGeolocationIPWhois { Param ( [Parameter(Mandatory = $true)] $IPAddress ) ##Deprecating API key check since current API service does not require a key. Keeping it around in case another one is chosen.## # If we don't have a OspreyAppData variable then we need to read it in <#if (!([bool](get-variable OspreyAppData -erroraction silentlycontinue))) { Read-OspreyAppData } # if there is no value of access_key then we need to get it from the user if ($null -eq $OspreyAppData.access_key) { Write-Host -ForegroundColor Green " IpStack.com now requires an API access key to gather GeoIP information from their API. Please get a Free access key from https://ipstack.com/ and provide it below. " # get the access key from the user $Accesskey = Read-Host "ipstack.com accesskey" # add the access key to the appdata file Add-OspreyAppData -name access_key -Value $Accesskey } else { $Accesskey = $OspreyAppData.access_key }#> # Check the global IP cache and see if we already have the IP there if ($IPLocationCache.ip -contains $IPAddress) { return ($IPLocationCache | Where-Object { $_.ip -eq $IPAddress } ) Write-Verbose ("IP Cache Hit: " + [string]$IPAddress) } elseif ($IPAddress -eq "<null>") { write-Verbose ("Null IP Provided: " + $IPAddress) $hash = @{ IP = $IPAddress CountryName = "NULL IP" Continent = "Unknown" ContinentName = "Unknown" City = "Unknown" } } # If not then we need to look it up and populate it into the cache else { # URI to pull the data from $resource = "http://ipwho.is/" + $ipaddress # Return Data from web $Error.Clear() $geoip = Invoke-RestMethod -Method Get -URI $resource -ErrorAction SilentlyContinue if (($Error.Count -gt 0) -or ($null -eq $geoip.type)) { Out-LogFile ("Failed to retrieve location for IP " + $IPAddress) $hash = @{ IP = $IPAddress CountryName = "Failed to Resolve" Continent = "Unknown" ContinentName = "Unknown" City = "Unknown" } } else { # Determine if this IP is known to be owned by Microsoft # [string]$isMSFTIP = Test-MicrosoftIP -IP $IPAddress -type $geoip.type # Push return into a response object $hash = @{ IP = $geoip.ip CountryName = $geoip.country Continent = $geoip.continent_code ContinentName = $geoip.continent_name City = $geoip.City } $result = New-Object PSObject -Property $hash } # Push the result to the global IPLocationCache [array]$Global:IPlocationCache += $result # Return the result to the user return $result } } |