Investigating Web attacks