Authentication Failure Notification - 认证失败通知 —— 登录或接入认证连续失败达到设定次数时上报

Zurückkehren Übergeordnet: Security Incident Notification - 安全事件通知子树 —— 认证失败、入侵、恶意代码与策略违规类事件，1-9 事件类、10-19 处置与关闭类、20-99 预留扩展 (1.3.6.1.4.1.59719.0.4)

Technische Informationen

Punkt-Notation:	`1.3.6.1.4.1.59719.0.4.1`
ASN.1-Notation:	`{ iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) tsingyao(59719) notifications(0) security-incident-notification(4) auth-failure-notification(1) }`
OID-IRI-Notation:	`/ISO/Identified-Organization/6/1/4/1/TsingYao/Notifications/SecurityIncidentNotification/AuthFailureNotification`
WEID-Notation:	`weid:P-1A2V-0-4-1-3`
DER-Kodierung:	`06:0B:2B:06:01:04:01:83:D2:47:00:04:01`

Beschreibung

English:
Authentication failure notification. Reported when login or network access authentication fails consecutively for the configured number of attempts within the configured window.
Status: registered but unused. No device or platform has emitted this notification. Before first use, define the counting window, the attempt threshold and the lockout action, and confirm that the payload excludes the password and any credential material. The unused state shall be re-verified at each revision of this file.
Recommendation: Carry the account name, the source address, the authentication method and the failure reason code, and aggregate attempts by source address so that a distributed brute-force attempt remains detectable.
See also: 1.3.6.1.4.1.59719.0.4, 1.3.6.1.4.1.59719.6.2, 1.3.6.1.4.1.59719.6.3.
Verification: 2026-10-22 — this arc and all its sub-ordinates are confirmed unused; re-verify the unused state at each revision of this file.

中文:
认证失败通知。登录或网络接入认证在设定窗口内连续失败达到配置次数时上报。
状态：已注册但未使用。尚无设备或平台上报过本通知。首次使用前应定义计数窗口、尝试次数阈值与锁定动作，并确认载荷中不含口令及任何凭证材料。本文件每次修订时须重新核验该未使用状态。
建议：应携带账号名、源地址、认证方式与失败原因码，并按源地址聚合尝试次数，使分布式暴力尝试仍可被发现。
关联节点：1.3.6.1.4.1.59719.0.4、1.3.6.1.4.1.59719.6.2、1.3.6.1.4.1.59719.6.3。
核验：2026-10-22 —— 本弧及其全部下级标识均确认未使用，本文件每次修订时须重新核验该未使用状态。

Registrierungsstelle

tsingyao
E-Mail: op@tsingyao.net
JunQing Gu
TsingYao Technology Limited

Die Registrierungsstelle möchte ihre persönlichen Informationen nicht veröffentlichen.

Untergeordnete Objekte

ID	Base36	ASN.1 IDs (kommagetrennt)	IRI IDs (Kommagetrennt)	RA	Kommentar	Erstellt	Geändert
Keine Einträge vorhanden

Alternative Bezeichner

Bezeichner	Beschreibung
aid:D276000186B200054278A5EC09784111 (Keine PIX erlaubt)	OIDplus Information Object Anwendungsbezeichner (ISO/IEC 7816)
guid:4278a5ec-0000-8000-a6d3-1025d9c76efa	OIDplus Information Object Custom UUID (RFC 9562)
guid:f24b5a94-a38d-3a0d-a0f5-05b7f2d28e94	Namensbasierte Version 3 / MD5 UUID mit Namensraum UUID_NAMEBASED_NS_OID
guid:4b6f8b92-ad0b-5e6e-9d6b-2e979e106902	Namensbasierte Version 5 / SHA1 UUID mit Namensraum UUID_NAMEBASED_NS_OID
mac:F2-60-89-78-41-11	OIDplus Information Objekt Unicast MAC-Adresse (AAI)
mac:F3-60-89-78-41-11	OIDplus Information Objekt Multicast MAC-Adresse (AAI)
weid:P-1A2V-0-4-1-3	WEID-Notation
x500dn:/dc=com/dc=example/cn=oidplus/1.3.6.1.4.1.37476.2.5.2.9.4.1=1115203052/1.3.6.1.4.1.37476.2.5.2.9.4.2=158875921	OIDplus Information Object X.500 DN