Determining Geolocation of IP Addresses Using User Transitions Over Time

A computerized method for determining a geolocation of an unseen network comprising:

• identifying user transitions for a particular user, wherein each of the user transitions is between a known network and the unseen network;
• and
• gathering geolocation information for each of a plurality of known networks that have a transition to the unseen network, wherein the plurality of known networks comprises a first known network and a second known network;
• and
• predicting the geolocation of the unseen network based on the identified user transitions and the geolocation information for the plurality of known networks.

A computerized method for mapping an unseen network comprising:

• creating a request log comprising a plurality of requests, wherein each request comprises a client ID, a network address, and a time stamp;
• creating a user transition log based on the request log, wherein the transition log comprises a plurality of user transitions from known networks to the unseen network, wherein each user transition corresponds to a pair of consecutive user requests and each of the pair of consecutive user requests is from a same client ID;
• compiling geolocation information for each of the known networks that have a user transition with the unseen network, wherein the geolocation information comprises latitude and longitude coordinates for each of the known networks;
• determining geolocation information for the unseen network based on the user transition log and the geolocation information for the known networks.