Offline geo enrichment
Ship MaxMind-compatible MMDB files into your enrichment pipeline. Pair geolocation with isMalicious reputation for faster triage.
Pro+
Plan required
.mmdb
Standard format
API
Authenticated download
Offline
No per-lookup latency
Everything you need to protect your infrastructure and users
Inspect version, build epoch, and node counts via /api/mmdb/info before downloading.
Large files stream directly to your automation without loading the full DB in memory.
Drop into SIEM, SOAR, or custom enrichment jobs that already consume GeoIP databases.
Use MMDB for high-volume local lookups and the REST API for fresh reputation verdicts.
How security teams use this tool
Attach country/ASN context to alerts offline.
Join MMDB geo fields with internal log warehouses.
Sync builds into restricted networks on a schedule.
MMDB excels at high-volume, low-latency geo context. Use the REST API (/api-docs) when you need fresh malicious verdicts on each lookup.
Join thousands of security teams using isMalicious to protect their infrastructure.