Returned Object - phbits/WebsiteFailedLogins GitHub Wiki
The following object is returned by Invoke-WebsiteFailedLogins
.
[Hashtable] WebsiteFailedLogins
{
<key 'FailedLoginsPerIP'><value [hashtable]>
<key '<ClientIP>'><value [hashtable]>
<key 'ClientIP'> <value [string]>
<key 'FailedLogins'> <value [string]>
<key 'Sitename'> <value [string]>
<key 'IISLogPath'> <value [string]>
<key 'Authentication'> <value [string]>
<key 'HttpResponse'> <value [string]>
<key 'UrlPath'> <value [string]>
<key 'Start'> <value [string]>
<key 'End~'> <value [string]>
<key 'TotalFailedLogins'><value [hashtable]>
<key 'TotalFailedLogins'><value [string]>
<key 'ClientIpList'> <value [hashtable]>
<key '<ClientIP>'><value [string]'FailedLoginCount'> # The key is the actual ClientIP
<key 'Sitename'> <value [string]>
<key 'IISLogPath'> <value [string]>
<key 'Authentication'> <value [string]>
<key 'HttpResponse'> <value [string]>
<key 'UrlPath'> <value [string]>
<key 'Start'> <value [string]>
<key 'End~'> <value [string]>
<key 'HasError'><value [boolean]> # indicates if an error occurred.
<key 'HasResults'><value [boolean]> # indicates if there are results.
<key 'Configuration'><value [hashtable]> # configuration from ini file
<key [string]><value [hashtable]>
<key 'ErrorMessages'><value [object[]]> # array of error messages.
}
As a reminder, $returnedObj.TotalFailedLogins.ClientIpList
will be a hashtable
of IP addresses and their failed login count. However, IP addresses that have less than 20% of the TotalFailedLogins setting will not appear in this list. That is to prevent large lists of IP addresses with just a few failed logins.