Brute force attacks are login attempts, but they don't look like normal users trying to log in. They can be identified by things like: The increased speed and frequency at which they occur, the unusual number of passwords used, and where the attempts originate.