HackMyIP

About HackMyIP

HackMyIP provides a free JSON API for IP geolocation, DNS lookup, WHOIS, and HTTP header inspection, accessible at https://hackmyip.com/api/v1 without signup or an API key. Core endpoints return the caller's public IP address with geolocation, ISP, and privacy/VPN detection data; look up geolocation and network information for any specified IPv4 or IPv6 address; query DNS records (A, AAAA, CNAME, MX, NS, TXT, SOA, SRV, CAA, PTR) for a domain; inspect the HTTP headers a client sent; and retrieve WHOIS/RDAP registration data for a domain, including registrar, dates, nameservers, and status.

A separate set of tool endpoints, served under /api without a version prefix, supports newer features: ASN lookup by IP, AS number, or organization name; a real TCP connect port scan against a public host (which rejects private, reserved, and internal addresses); an HTTP security headers analyzer that grades headers such as CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy; and an email authentication checker that evaluates a domain's MX, SPF, and DMARC configuration.

Responses are returned as JSON with CORS enabled, and requests are served via Cloudflare's edge network. The base IP/DNS/WHOIS/headers API is rate limited to 60 requests per minute, while the newer tool endpoints (ports, security-headers) are rate limited to 20 requests per minute. The API is aimed at developers who need IP, DNS, WHOIS, or header/security-inspection data without managing authentication or API keys.

Key features

• IP geolocation and VPN/proxy detection
• DNS record lookup for A, AAAA, CNAME, MX, NS, TXT, SOA, SRV, CAA, and PTR types
• WHOIS/RDAP domain lookup for registrar and expiration data
• Real TCP port scanning against public hosts
• HTTP security headers analyzer with grading
• Email authentication checker for MX, SPF, and DMARC

Frequently asked questions