Category 18
Brute Force
Repeated login attempts against SSH, FTP, mail, web or other authentication endpoints.
- Reported IPs
- 21,625
- Reports
- 236,463
- Reporters
- 7
- Last report
- 11/14/2026
Brute-force reports describe an address that tries many username and password combinations against a service, usually SSH, FTP, SMTP/IMAP, RDP or web login forms. Most reports come from fail2ban and similar sensors that ban an address after several failed logins. Credential stuffing and password spraying are filed here too.
API category IDs
- ID
- 18
- Accepted IDs
- 5, 18, 22
Report with categories=5,18,22. Check responses list this category as 18. API-Docs
Top countries
- Netherlands56,21524%
- United States20,3609%
- United Kingdom20,0098%
- China15,8557%
- Türkiye13,6106%
- Iran12,9795%
- India8,9724%
- Vietnam6,6143%
- Andorra6,5953%
- Indonesia6,1303%
