What is a brute-force attack?

A brute-force attack tries passwords one after another until one works, against an email login, a VPN, a remote desktop or an SSH server. Modern versions use lists of leaked passwords, or try one common password against many accounts (password spraying) to avoid lockouts. The defences are well known: long unique passwords, two-factor authentication, account lockout and not exposing login services to the whole internet. The login logs of the service are the definitive record. On the network, many failed connections to a login service in a short time form a visible pattern, and NetSenX looks for it on every plan, on traffic it can see.

← All 69 questions on What is…? Network and security termsAll topics