IP Geolocation Lookup

Free, no API key, no sign-up. Continent, country, region, city and postal code for any IPv4 or IPv6 address.

Your IP address is 216.73.216.21

Looking up…

Continent: –
Continent code: –
Country: –
Country code: –
Region: –
Region code: –
City: –
Postal code: –

Raw JSON

API

Plain HTTP, no authentication, CORS enabled. Works from a shell, a browser or any server-side language.

Request	Returns
`curl doapi.us/ip`	Your public IP address as plain text.
`curl doapi.us/ip/myip`	Geolocation of your own IP as plain text.
`curl doapi.us/ip/1.2.3.4`	Geolocation of `1.2.3.4` as plain text, one `key: value` per line.
`curl doapi.us/ip/1.2.3.4/json`	The same fields as JSON.

Example response

{
  "continent": "North America",
  "continent_code": "NA",
  "country": "United States",
  "country_code": "US",
  "subdivision": "New York",
  "subdivision_code": "NY",
  "city": "New York",
  "postal": "10001"
}

Notes

Fields that cannot be resolved (private ranges, unknown networks) come back as null.
An invalid address returns HTTP 400 with "_res": "err".
/ip and /ip/… are also served over plain HTTP so scripts without TLS can use them.
Results for a given IP may be cached for up to 24 hours. Location data is provided by the MaxMind GeoIP2 City database; city-level accuracy varies by network.

WordPress plugin

DoLogin Security

The WordPress login security plugin behind this API. One click adds brute-force protection to your login page; the GeoLocation rules in DoLogin resolve visitor locations through this very service.

🔒

Two-factor authentication

Time-based one-time codes with secrets encrypted at rest; forced 2FA rejects accounts with no secret.

📱

KeyLockr SSO scan login

Scan a QR code and approve on your phone. Signed, encrypted, replay-checked frames; the server owns every private key.

🌍

GeoLocation and IP rules

Allow or block logins by continent, country, city or IP range, with whitelist and blacklist support.

🛡

Brute-force rate limiting

Limits login attempts per IP through both the login form and auth cookies; XML-RPC gets its own guard.

✅

Cloudflare Turnstile

Privacy-friendly captcha on the login form, a better fit than Google reCAPTCHA.

🔗

Passwordless and Easy Login

One-time login links and signed root-to-child site connections; tokens are stored only as salted verifiers.

Also: GDPR-friendly IP obfuscation, WooCommerce login support, and a database that stays useless to an attacker without the site salts.

Get DoLogin Security on wordpress.org