IP Geolocation Lookup
Free, no API key, no sign-up. Continent, country, region, city and postal code for any IPv4 or IPv6 address.
Your IP address is 216.73.216.165
- Continent
- –
- Continent code
- –
- Country
- –
- Country code
- –
- Region
- –
- Region code
- –
- City
- –
- Postal code
- –
Raw JSON
API
Plain HTTP, no authentication, CORS enabled. Works from a shell, a browser or any server-side language.
| Request | Returns |
|---|---|
curl doapi.us/ip | Your public IP address as plain text. |
curl doapi.us/ip/myip | Geolocation of your own IP as plain text. |
curl doapi.us/ip/1.2.3.4 | Geolocation of 1.2.3.4 as plain text, one key: value per line. |
curl doapi.us/ip/1.2.3.4/json | The same fields as JSON. |
Example response
{
"continent": "North America",
"continent_code": "NA",
"country": "United States",
"country_code": "US",
"subdivision": "New York",
"subdivision_code": "NY",
"city": "New York",
"postal": "10001"
}
Notes
- Fields that cannot be resolved (private ranges, unknown networks) come back as
null. - An invalid address returns HTTP 400 with
"_res": "err". /ipand/ip/…are also served over plain HTTP so scripts without TLS can use them.- Results for a given IP may be cached for up to 24 hours. Location data is provided by the MaxMind GeoIP2 City database; city-level accuracy varies by network.
DoLogin Security
The WordPress login security plugin behind this API. One click adds brute-force protection to your login page; the GeoLocation rules in DoLogin resolve visitor locations through this very service.
Two-factor authentication
Time-based one-time codes with secrets encrypted at rest; forced 2FA rejects accounts with no secret.
KeyLockr SSO scan login
Scan a QR code and approve on your phone. Signed, encrypted, replay-checked frames; the server owns every private key.
GeoLocation and IP rules
Allow or block logins by continent, country, city or IP range, with whitelist and blacklist support.
Brute-force rate limiting
Limits login attempts per IP through both the login form and auth cookies; XML-RPC gets its own guard.
Cloudflare Turnstile
Privacy-friendly captcha on the login form, a better fit than Google reCAPTCHA.
Passwordless and Easy Login
One-time login links and signed root-to-child site connections; tokens are stored only as salted verifiers.
Also: GDPR-friendly IP obfuscation, WooCommerce login support, and a database that stays useless to an attacker without the site salts.