A system and method for monitoring Internet Protocol (IP) data traffic may include receiving IP data generated by a target device interacting on the Internet, determining at least one activity performed by the target device based on the IP data, wherein an activity describes an interaction on the Internet, and aggregating data describing the at least one activity into one or more chunks, each chunk corresponding to a portion of time and at least one activity performed by the targets.