All MIBs › SNMPv2-MIB › snmpInBadCommunityNames
snmpInBadCommunityNames
Module: SNMPv2-MIB
OID (symbolic): SNMPv2-MIB::snmpInBadCommunityNames
OID (numeric): 1.3.6.1.2.1.11.4
Node type: OBJECT-TYPE
Type: Counter32
Access: read-only
Description:
The total number of community-based SNMP messages (for example, SNMPv1) delivered to the SNMP entity which used an SNMP community name not known to said entity. Also, implementations which authenticate community-based SNMP messages using check(s) in addition to matching the community name (for example, by also checking whether the message originated from a transport address allowed to use a specified community name) MAY include in this value the number of messages which failed the additional check(s). It is strongly RECOMMENDED that
the documentation for any security model which is used to authenticate community-based SNMP messages specify the precise conditions that contribute to this value.
What is snmpInBadCommunityNames?
This is a running count of SNMP requests that arrived with an unknown or unauthorized community name (password), indicating authentication failure. Network engineers use it to detect unauthorized probes or misconfigured monitoring systems attempting to query the device. A high counter here signals either a security probe or a legitimate tool with wrong credentials.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.2.1.11.4 snmpwalk -v2c -c public <target> SNMPv2-MIB::snmpInBadCommunityNames
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.2.1.11.4.1 snmpget -v2c -c public <target> SNMPv2-MIB::snmpInBadCommunityNames.1