MaxMind determined that 1m IP addresses were operated by entities in Pretoria, and so it geolocated those IP addresses to the coordinates offered by the NGA for the city. And any time someone uses one of those IP addresses to do something bad—like cyberbullying the owners of a leather shop—it looks to someone who maps the address like the bad thing is being done by someone sitting in John and Ann’s backyard.