detect bad requests