All MIBs › CHECKPOINT-MIB › numOfIpSweep
numOfIpSweep
Module: CHECKPOINT-MIB
OID (symbolic): CHECKPOINT-MIB::numOfIpSweep
OID (numeric): 1.3.6.1.4.1.2620.1.17.1.2.3.2.1
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-only
Description: host port scan
What is numOfIpSweep?
This counts detected network sweep attempts, where a single source probes the same port across many destination hosts to find live systems. Unlike the port-scan counter above, this flags which hosts exist reconnaissance rather than which services are open, and admins use a rise here to spot someone mapping out the live IP range before attempting a targeted attack. For example, one external address probing port 3389 for RDP across an entire subnet within seconds would show up as an IP sweep here.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.2620.1.17.1.2.3.2.1 snmpwalk -v2c -c public <target> CHECKPOINT-MIB::numOfIpSweep
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.2620.1.17.1.2.3.2.1.1 snmpget -v2c -c public <target> CHECKPOINT-MIB::numOfIpSweep.1
SNMPv3 example:
snmpget -v3 -l authPriv -u snmpv3-user -a SHA -A "AuthPassword1" -x AES -X "PrivPassword1" <target> numOfIpSweep.1
Start monitoring Check Point security gateway/firewall appliances with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CHECKPOINT-MIB::numOfIpSweep OID value, configure state conditions and alerts, and monitor any Check Point security gateway/firewall appliances from a single console.
OID Breakdown
Upper-level ancestors (8 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.2620 | checkpoint | CHECKPOINT-GAIA-TRAP-MIB |
| 1.3.6.1.4.1.2620.1 | products | CHECKPOINT-GAIA-TRAP-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.2620.1.17 | smartDefense | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.17.1 | asmAttacks | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.17.1.2 | asmLayer4 | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.17.1.2.3 | asmScans | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.17.1.2.3.2 | asmIPSweep | CHECKPOINT-MIB |
| 1.3.6.1.4.1.2620.1.17.1.2.3.2.1 | numOfIpSweep | CHECKPOINT-MIB |