Methods for mapping ip addresses and domains to organizations using user activity data

A computer-implemented method for mapping Internet Protocol (IP) addresses and domain names to organizations, the method comprising:

• receiving, by a mapping system from a data provider, a dataset related to a plurality of users of the data provider, the dataset having at least one of:
• (a) an IP address for a user device of each user of the plurality of users, or
• (b) a domain name for a user account of each user of the plurality of users;
• enriching, by an analytics engine of the mapping system, the received dataset with enrichment data from an enrichment source;
• receiving, by the analytics engine from a storage medium, historical data relevant to the enriched dataset;
• mapping, by the analytics engine, at least one of (i) the IP address or (ii) the domain name of each user of a portion of the plurality of users to an organization based on the enriched dataset and the historical data;
• receiving another dataset related to at least a portion of the plurality of users;
• assessing whether the mapped IP address and/or the mapped domain name should be terminated based on the other dataset;
• and
• terminating the mapping of the IP address and/or the domain name based on the assessment.