When an account experience say 100 failed login attemps in 1 hour but the 101 login is succesvol this might indicate a successfull brute force attack. In that case I want to know.

Number of attempts and timeframe to be defined; this was just an example.