diff --git a/decnet/web/router/attackers/api_get_attacker_commands.py b/decnet/web/router/attackers/api_get_attacker_commands.py
index c0d152b..bb7875a 100644
--- a/decnet/web/router/attackers/api_get_attacker_commands.py
+++ b/decnet/web/router/attackers/api_get_attacker_commands.py
@@ -17,7 +17,7 @@ router = APIRouter()
 )
 async def get_attacker_commands(
     uuid: str,
-    limit: int = Query(50, ge=1, le=1000),
+    limit: int = Query(50, ge=1, le=200),
     offset: int = Query(0, ge=0, le=2147483647),
     service: Optional[str] = None,
     current_user: str = Depends(get_current_user),
diff --git a/decnet_web/src/components/AttackerDetail.tsx b/decnet_web/src/components/AttackerDetail.tsx
index a9d862c..5772d1d 100644
--- a/decnet_web/src/components/AttackerDetail.tsx
+++ b/decnet_web/src/components/AttackerDetail.tsx
@@ -253,7 +253,10 @@ const AttackerDetail: React.FC = () => {
         const res = await api.get(url);
         setCommands(res.data.data);
         setCmdTotal(res.data.total);
-      } catch {
+      } catch (err: any) {
+        if (err.response?.status === 422) {
+          alert("Fuck off.");
+        }
         setCommands([]);
         setCmdTotal(0);
       }