internal/functions/Get-IPGeolocationIPWhois.ps1


<#
.SYNOPSIS
    Get the Location of an IP using the http://ipwho.is/ API
.DESCRIPTION
    Get the Location of an IP using the http://ipwho.is/ API
.PARAMETER IPAddress
    IP address of geolocation
.EXAMPLE
    Get-IPGeolocation
.NOTES
    General notes
#>
 
Function Get-IPGeolocationIPWhois {

    Param
    (
        [Parameter(Mandatory = $true)]
        $IPAddress
    )

    ##Deprecating API key check since current API service does not require a key. Keeping it around in case another one is chosen.##
    # If we don't have a OspreyAppData variable then we need to read it in
    <#if (!([bool](get-variable OspreyAppData -erroraction silentlycontinue))) {
        Read-OspreyAppData
    }

    # if there is no value of access_key then we need to get it from the user
    if ($null -eq $OspreyAppData.access_key) {

        Write-Host -ForegroundColor Green "
        IpStack.com now requires an API access key to gather GeoIP information from their API.
        Please get a Free access key from https://ipstack.com/ and provide it below.
        "

        # get the access key from the user
        $Accesskey = Read-Host "ipstack.com accesskey"

        # add the access key to the appdata file
        Add-OspreyAppData -name access_key -Value $Accesskey
    }
    else {
        $Accesskey = $OspreyAppData.access_key
    }#>
 

    # Check the global IP cache and see if we already have the IP there
    if ($IPLocationCache.ip -contains $IPAddress) {
        return ($IPLocationCache | Where-Object { $_.ip -eq $IPAddress } )
        Write-Verbose ("IP Cache Hit: " + [string]$IPAddress)
    }
    elseif ($IPAddress -eq "<null>") {
        write-Verbose ("Null IP Provided: " + $IPAddress)
        $hash = @{
            IP            = $IPAddress
            CountryName   = "NULL IP"
            Continent     = "Unknown"
            ContinentName = "Unknown"
            City          = "Unknown"
        }
    }
    # If not then we need to look it up and populate it into the cache
    else {
        # URI to pull the data from
        $resource = "http://ipwho.is/" + $ipaddress

        # Return Data from web
        $Error.Clear()
        $geoip = Invoke-RestMethod -Method Get -URI $resource -ErrorAction SilentlyContinue

        if (($Error.Count -gt 0) -or ($null -eq $geoip.type)) {
            Out-LogFile ("Failed to retrieve location for IP " + $IPAddress)
            $hash = @{
                IP            = $IPAddress
                CountryName   = "Failed to Resolve"
                Continent     = "Unknown"
                ContinentName = "Unknown"
                City          = "Unknown"
            }
        }
        else {
            # Determine if this IP is known to be owned by Microsoft
            # [string]$isMSFTIP = Test-MicrosoftIP -IP $IPAddress -type $geoip.type

            # Push return into a response object
            $hash = @{
                IP            = $geoip.ip
                CountryName   = $geoip.country
                Continent     = $geoip.continent_code
                ContinentName = $geoip.continent_name
                City          = $geoip.City
            }
            $result = New-Object PSObject -Property $hash
        }

        # Push the result to the global IPLocationCache
        [array]$Global:IPlocationCache += $result

        # Return the result to the user
        return $result
    }
}