Basic L/H attack recognition