Patent ID: 8838832

Claim:
A computer-implemented method for clustering network addresses, the method comprising: receiving data for one or more first network communications from a first network address and one or more second network communications from a second network address; determining, by one or more hardware processors, whether the first network communications and the second network communications include a first number of distinct identifiers in common; associating the first network address and the second network address as a cluster based on determining that the first network communications and the second network communications include the first number of distinct identifiers in common; receiving an authentication request for an account from the first network address; determining whether the account has previously successfully responded to a security challenge a threshold percentage of times over a particular period of time from network addresses in the cluster; providing the security challenge in response to determining that the account has not previously successfully responded to the security challenge the threshold percentage of times over the particular period of time from the network addresses in the cluster; receiving a successful response to the security challenge from the first network address in response to providing the security challenge; and providing access to the account in response to receiving the successful response.