I wrote a blog in CERT/CC on GeoIP in your SOC (Security Operations Center). Here I am exploring a little bit more nuts and bolts (technical) details on optimal ways to use GeoIP data in SQL. The idea is really optimize bulk lookup of IP addresses for geolocation with very quick response times for say thousands or millions of IP addresses.