Implementations described and claimed herein provide systems and methods for generating network intelligence based on network data. In one implementation, a network traffic dataset representative of network traffic across one or more ports of a primary network is obtained. The ports are associated with a secondary network in communication with the primary network. A content distribution network log associated with the secondary network is obtained. The content distribution log includes a history of content requests. A domain name system log associated with the secondary network is obtained. The domain name system log includes one or more Internet Protocol addresses. Network intelligence is generated based on the network traffic dataset, the content distribution network log, and the domain name system log. The network intelligence may be customer analytics, an aggregated data feed, and/or recommendations for inventory placement.