online attack

Also written: online guessing

Guessing passwords against a live service, where every guess is a real login that gets logged. Cracking stolen hashes offline leaves no such traces.