There’s been a recent spike in brute-force attacks using actual usernames. Here’s a few tips on how to stop the bots.