A middleware that tracks down malicious server activity