Spaw vs Ipregistry
Ipregistry is a geolocation and threat API sold as credits, either monthly subscriptions or pay-as-you-go packs, whose security object answers abuser, attacker, bogon, cloud provider, proxy, relay, Tor, VPN, anonymous and threat flags and whose data is described as built from BGP tables, registry databases, geofeeds and latency measurements.
The table uses Ipregistry's public pricing and documentation pages as checked on 2026-09-12, and Spaw's own pricing page. A row those pages carry no value for is marked "not on the pages read" rather than guessed at, and that is a statement about the reading and not about what Ipregistry publishes.
| spaw | ipregistry | |
|---|---|---|
| Pricing model | Pay-as-you-go credit packs whose credits never expire, or optional plans, billed monthly or yearly, that deposit the same credits every month for less and roll unused plan credits over up to three months' allowance; both through Stripe Checkout. One credit buys five answered IP lookups | Credits, "1 lookup = 1 request = 1 credit" (batch endpoints use "one credit per lookup in the batch request, plus 1"). Subscriptions: Starter "100,000 credits / mo" at "$29 $24 / month", Professional "300,000 credits / mo" at "$79 $66 / month", Business "1,150,000 credits / mo" at "$199 $166 / month", Scale "2,450,000 credits / mo" at "$399 $333 / month" (the lower figure is the annual rate). Pay-as-you-go packs: 15,000 credits for $10, 100,000 for $50, 250,000 for $100, 1,750,000 for $500. |
| Free tier | 100 free credits every month, no card required | "20,000 free credits on sign-up" with "No credit card, no time limit" |
| Price per 1,000 at about 10k | $1.80 per 1,000 IP lookups at 5 to the credit (Starter pack: 1,000 credits for $9), or $1.40 on the Starter monthly plan (1,000 credits for $7 a month) | $0.67 (the $10 pack of 15,000 credits, $0.000667 a lookup) |
| Price per 1,000 at about 100k | $1.56 per 1,000 IP lookups at 5 to the credit (Growth pack: 5,000 credits for $39), or $1.16 on the Growth monthly plan (5,000 credits for $29 a month) | $0.50 (the $50 pack of 100,000 credits, $0.0005 a lookup) |
| Addresses no feed covered billed | One credit buys five answered addresses whatever their flags say; a flag no feed could evaluate answers null rather than false, and the answer costs the same | not on the pages read |
| Reserved and private ranges billed | No: reserved, private, loopback, CGNAT, documentation and multicast ranges answer reason reserved_range and are free, unallocated space is free, and so are repeats within 7 days | not on the pages read |
| Feeds behind the flags | Public feeds, each named in the answer with the date it was synced: DB-IP Lite and RFC 8805 geofeeds for location, the five registries' delegated statistics for allocation, Spamhaus DROP and ASN-DROP and abuse.ch Feodo Tracker for blocklists, the Tor Project's exit list and Onionoo, the Mullvad, NordVPN and Private Internet Access server lists plus the open X4BNet lists, Apple's iCloud Private Relay egress list, the cloud providers' own published ranges, and the verification files Google, Microsoft, OpenAI, Perplexity, DuckDuckGo and Ahrefs publish for their crawlers. | Its own datasets, derived "from multiple sources using unique AI algorithms" including "BGP tables, Regional Internet Registry (RIR) databases, ISP data, data-sharing agreements, geofeeds, latency-based tracking". The security object carries is_abuser, is_attacker, is_bogon, is_cloud_provider, is_proxy, is_relay, is_tor, is_tor_exit, is_vpn, is_anonymous and is_threat. |
| Refresh cadence | Every feed re-syncs daily, the botnet command-and-control list hourly, and the geofeed crawl weekly. Each response names every dataset it consulted with the date it was last synced, and /status lists them all. | "All IP geolocation data is refreshed at least once per day, and threat/security data is updated on average every 15 minutes" |
| Geolocation source | The DB-IP Lite database, overridden wherever the operator publishes the location itself — an RFC 8805 geofeed, Apple's relay list, a VPN provider's server list. location_source says which answered, and location_confidence is graded from a weekly accuracy report rather than asserted. | Its own, from the sources above; no numeric accuracy claim is published on the pages read |
| Bulk limit | 100,000 addresses per bulk job, with an HMAC-signed completion webhook | not on the pages read |
| Batch API | 1,000 addresses per synchronous request; repeats inside the list are looked up once | Batch endpoints exist and cost "one credit per lookup in the batch request, plus 1"; the maximum per request is on a documentation page that answered 404 on the day |
| Rate limit | 50 requests per second per key on the IP endpoints | "Rate limiting or throttling is NOT enabled by default. Your only constraint is the balance of credits available on your account"; an hourly lookup limit can be set per key, "based on an adaptation of the leaky bucket algorithm" |
| Official SDKs | Python, Node.js, PHP | not on the pages read |
| Data retention | No history row and no log line carrying the address. What a lookup leaves is keyed and never holds the address: the 7-day marker that makes a repeat free and, under the same keyed hash, the count behind seen_by_you; privacy: true skips both. The account's own outcome reports are kept as salted hashes for 90 days. Bulk input lists and result files are deleted with the job after 30 days. | not on the pages read |
checked 2026-09-12 · sources: Ipregistry pricing, Ipregistry response fields, Ipregistry throttling
When Ipregistry fits better
Teams that want a credit model with pay-as-you-go packs and a security object with a dozen named flags, from a vendor that names its data sources in general terms.
- Credits do not expire on the pay-as-you-go packs, as on Spaw; the subscriptions reset monthly
- Threat data is refreshed on average every 15 minutes, geolocation at least daily
- Throttling is off by default and set per key
- The security object separates Tor from Tor exits, and relay from VPN
When Spaw fits better
Developers who want every public IP feed compiled, dated and named for them, with a risk score whose weights are published so it can be recomputed or ignored.
- Ipregistry describes its sources as BGP tables, registry databases, geofeeds and latency tracking combined by its own algorithms; Every dataset behind a Spaw IP answer is a public feed named in the response with the date it was synced, and the risk score is a published sum of weights anyone can recompute
- Both sell credits; a Spaw credit buys five answered IP lookups, with reserved, private and unallocated ranges and seven-day repeats free, and unlike a pack the free monthly grant renews
- Ipregistry answers is_threat and is_abuser from its own data; Spaw names the list behind is_blocklisted and is_attack_source and shows the weight each carried
- Spaw applies your own allow and deny lists inside every answer (an allow-list hit scores 0, a deny-list hit 100) and counts your own lookups of an address; neither is a field the other vendor's pages describe
Questions
Does Spaw charge for addresses its feeds do not cover?
Spaw bills per answered address, five to the credit: the answered lookup that opens a block costs 1 credit and the next four cost nothing. Reserved, private, loopback, CGNAT, documentation and multicast ranges answer reason reserved_range and are free, unallocated space is free, and so is a repeat of the same address within seven days. A flag no feed could evaluate answers null rather than false: the address is still billed, and the null tells you the signal was not checked instead of pretending it was. Ipregistry does not publish how it bills them.
Can I run a log file or an export through Spaw?
Yes. A bulk run takes up to 100,000 addresses from the dashboard or the API and returns one row per input address, in input order, with every flag, the risk score and the signals that made it. Five answered addresses cost a credit, repeats inside the list are looked up once, reserved ranges cost nothing, and the finish is announced on an HMAC-signed webhook.
Is there a free tier?
Every Spaw account receives 100 free credits at the start of each month with no card on file, and unused free credits accumulate. Ipregistry offers: "20,000 free credits on sign-up" with "No credit card, no time limit".
Try Spaw on your own list
Free credits every month, no card. Upload a list, keep your columns, and download only the rows you want. See the pricing page for every rule, or the Ipregistry alternatives.
Ipregistry is a trademark of its owner. Spaw is not affiliated with it. Markdown version: /compare/ipregistry.md