Tag brute-force attacks on VPNs