Blocking Brute-Force Attacks