1. A method of controlling access to server resources over a network, the method comprising: receiving, at a server on the network, a request for server resources from a network device; receiving a geographic prediction model to predict geographic coordinates of the network device, wherein the geographic prediction model includes conditional multivariate normal distributions grouped into one or more subclasses, each distribution having a mean vector representing typical traceroute information between a plurality of training network devices and one or more beacons; receiving traceroute information between the network device and Internet Protocol (IP) addresses for the one or more beacons associated with the geographic location prediction model without requiring a geographic location for at least one of the beacons; generating, by use of a processor, predicted geographic coordinates for the network device by using the geographic prediction model to compare the traceroute information with geographic locations of the plurality of training network devices; and generating a result including the predicted geographic coordinates of the network device and an associated covariance matrix, wherein the result causes the server to grant the network device access to one or more server resources.