Open API

Look up where an IP is: no signup, no key, no 300-page manual. Browsers can call it directly (CORS *) and it works from a single curl line.

No API key 60 req / min / IP CORS enabled HTTP/2 at the edge

Try it

Plain text /geo

Loading…

JSON /geo/json

Loading…

Badge image /img1

Mask address Dark theme

Endpoints

Path	Content-Type	Notes
/geo	text/plain	4 lines of plain text; defaults to your own IP
/geo/<ip or domain>	text/plain	Explicit target; domains are resolved to their A record
/geo/json[/<ip>]	application/json	Structured fields including coordinates, timezone and risk score
/geo/jsonp?callback=fn	application/javascript	Old-school JSONP for pages that can only add a `<script>`
/img1[/<ip>]	image/svg+xml	Badge image; defaults to the visitor's IP

Every path also accepts ?ip=, e.g. /geo/json?ip=1.1.1.1 — both forms are equivalent.

Plain-text format

Always four lines in a fixed order, with - for anything unavailable — so line numbers never shift:

line 1  IP address
line 2  country region city (space separated)
line 3  ASN, e.g. AS15169
line 4  ISP / organization full name

# just the location
curl -s https://ip.accglam.com/geo/8.8.8.8 | sed -n '2p'
# just the ASN
curl -s https://ip.accglam.com/geo/8.8.8.8 | sed -n '3p'
# in a script (assign to variables)
read -r ip loc asn isp < <(curl -s https://ip.accglam.com/geo/8.8.8.8)

JSON fields

Field	Type	Notes
ip	string	The IP actually queried (domains are resolved first)
input	string	Only present when a domain was given; keeps the original input
country / country_code	string	Country name and ISO code; Hong Kong / Macao / Taiwan are reported as "Hong Kong SAR, China" / "Macao SAR, China" / "Taiwan, China"
region / city	string	Region and city
location	string	The three above joined for you
lat / lon	number	Coordinates (city level, not street level)
timezone	string	IANA timezone name
asn / asn_org	string	e.g. `AS13335` / `Cloudflare, Inc.`
isp / org	string	Carrier and registered organisation
ip_type	string	Datacenter / IDC, CDN edge node, residential / fixed-line, mobile network, VPN / proxy, Tor exit node
risk_score	number\|null	0-100 risk score; `null` means this IP was never scored here (no blacklists were run, so we don't guess)
risk_level	string\|null	Low / moderate-low / moderate-high / high risk
maps	string\|null	OpenStreetMap link
cached	boolean	Whether the edge cache was hit

Badge image

Drop it into a forum signature, your homepage or a README: it shows the visitor's own IP location, so a thousand people see a thousand different results — that is the fun part. Pure SVG, no external requests, under 2KB.

Param	Value	Notes
ip	IP / domain	Omitted: shows the visitor's own IP
theme	light (default) / dark	Dark background for dark forums
mask	1	Mask it: IPv4 becomes `1.2..`, IPv6 keeps the first 4 groups
lang	en / zh	Badge labels and country name language

The image endpoint has a wider quota — 180 req/min — because one forum page can carry a dozen badges.

Rate limits & caching

Kind	Quota	Window
Text / JSON	60 requests	per minute, per IP
Badge image	180 requests	per minute, per IP

Every response carries these three headers, so you can see the limit coming:

X-RateLimit-Limit: 60
X-RateLimit-Remaining: 57
X-RateLimit-Reset: 1761495060   # unix timestamp of the window reset

Over quota returns 429 + Retry-After. Responses for an explicit IP are cached 10 minutes at the edge and 1 minute locally; responses for your own IP are never cached (otherwise you would be served someone else's address).

Status codes

Code	Meaning
200	OK
400	Bad parameters (invalid IP/domain, illegal JSONP callback)
404	Not found (private address, domain without an A record, no upstream data)
405	Anything other than GET
429	Over quota — check `Retry-After`
504	DNS resolution timed out

Data sources & limits

Location: the free ip-api.com tier (English), cached 24 hours at the edge. City-level accuracy, not street-level.
ASN / ISP: live ip-api data plus our own RIPEstat history snapshots (daily, 03:17 UTC).
Risk score: only present for IPs already scored on the main site, derived from 10 DNSBLs, the Tor exit list and ASN / rDNS profiles. Never scored means null — we will not invent a number.
Privacy: we do not log what you look up; the rate-limit bucket stores the first 8 bytes of a SHA-256 of your IP and expires with the window.
Free tier reality: the upstream ip-api free tier allows 45 requests per minute, absorbed by edge caching. If traffic ever outgrows it, the explicit-IP endpoints degrade first, rather than the whole site.

Use it for whatever you like, no attribution needed. Questions or a field you want? Just ask.