more brute force detection