Skip to main content
Data Products

MMDB Download Offline geo enrichment

Ship MaxMind-compatible MMDB files into your enrichment pipeline. Pair geolocation with isMalicious reputation for faster triage.

No credit card required · Free API key

Pro+

Plan required

.mmdb

Standard format

API

Authenticated download

Offline

No per-lookup latency

Capabilities

Key features. Everything you need to protect your infrastructure and users.

Build metadata

Inspect version, build epoch, and node counts via /api/mmdb/info before downloading.

Streaming download

Large files stream directly to your automation without loading the full DB in memory.

Pipeline friendly

Drop into SIEM, SOAR, or custom enrichment jobs that already consume GeoIP databases.

Complements live API

Use MMDB for high-volume local lookups and the REST API for fresh reputation verdicts.

Applications

Use cases. How security teams use this tool.

SOC enrichment

Attach country/ASN context to alerts offline.

Bulk analytics

Join MMDB geo fields with internal log warehouses.

Air-gapped sites

Sync builds into restricted networks on a schedule.

When to use MMDB vs live API

MMDB excels at high-volume, low-latency geo context. Use the REST API (/api-docs) when you need fresh malicious verdicts on each lookup.

Support

Frequently asked questions.

Is this a replacement for MaxMind?

No — we distribute compatible builds for enrichment alongside isMalicious threat data.

How often are builds updated?

Build cadence is exposed in /api/mmdb/info. Automate polling from your deployment pipeline.
Get started

Ready to get started?

Join thousands of security teams using isMalicious to protect their infrastructure.

No credit card required · Free API key