1. A method, comprising: retrieving data from one or more events in a data store having time stamps that fall within an identified time period, each of the one or more events including information relating to an access to a domain name; displaying a visual representation of the retrieved data in a scatter plot for the identified time period that includes selectable points, each selectable point representing a domain name; wherein the method is performed by one or more computing devices.