Detecting Brute-Force and Dictionary attacks