check for brute force attack