Failed sessions allow brute-force attacks on access credentials. This type of attacks are done in which layer of the OSI model?

The Open Systems Interconnection (OSI) model is a reference model that describes how computer networks communicate and operate. It breaks down the flow of a network into seven different stages:
Physical, Data Link, Network, Transport, Session, Presentation, Application