Abstract: Disclosed embodiments includes a network classification system (NCS) that generates a set of machine learning (ML) features from information about information objects accessed by various users, and determines an organization (org) type associated with the network address based on the set of ML features. Obtained network events may include the information about the accessed information objects. A content consumption monitor (CCM) generates consumption scores for the network addresses based on the identified org types. The CCM can generate more accurate intent and consumption data by filtering out events unrelated to content consumption for that org type. The NCS and the CCM may be implemented as the same network function, or the NCS and CCM may be implemented as separate network functions. Other embodiments may be described and/or claimed.

Abstract: An IP-to-Domain (IP2D) resolution system predicts which domain is most likely associated with an IP address. The resolution system generates unique source vote features (FSV) from (IP, domain, source) data. The FSV features are used to train a machine learning model that predicts which domain is most likely associated with an IP address. The domain predictions can then be used to more efficiently process events, more accurately calculate consumption scores, and more accurately detect associated company surges.

Abstract: Disclosed embodiments includes a network classification system (NCS) that generates a set of machine learning (ML) features from information about information objects accessed by various users, and determines an organization (org) type associated with the network address based on the set of ML features. Obtained network events may include the information about the accessed information objects. A content consumption monitor (CCM) generates consumption scores for the network addresses based on the identified org types. The CCM can generate more accurate intent and consumption data by filtering out events unrelated to content consumption for that org type. The NCS and the CCM may be implemented as the same network function, or the NCS and CCM may be implemented as separate network functions. Other embodiments may be described and/or claimed.

Abstract: A content consumption monitor (CCM) receives events identifying how and when users access content. The CCM may identify internet protocol (IP) addresses associated with the events and determine types of establishments associated with the IP addresses based on how the users access the content at the IP addresses. The CCM may generate consumption scores for the IP addresses based on the identified types of establishments. For example, the CCM can generate consumption scores for IP addresses associated with private business locations. The CCM can generate more accurate intent and consumption data by filtering out events unrelated to company content consumption.