All MIBs › TOS-IDS › idsPortscan
idsPortscan
Module: TOS-IDS
OID (symbolic): TOS-IDS::idsPortscan
OID (numeric): 1.3.6.1.4.1.14331.5.5.1.11.14
Node type: OBJECT-TYPE
Type: Counter32
Access: read-only
Description: portscan.
What is idsPortscan?
This counter tracks the total number of port scan attacks the Topsec IDS has detected, where a source systematically probes a range of ports on one or more hosts. An admin watches this counter to catch reconnaissance activity that commonly precedes a more targeted exploitation attempt. For example, a sudden jump in idsPortscan detections from one external address would prompt the admin to consider blocking that source proactively.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.14331.5.5.1.11.14 snmpwalk -v2c -c public <target> TOS-IDS::idsPortscan
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.14331.5.5.1.11.14.1 snmpget -v2c -c public <target> TOS-IDS::idsPortscan.1
Start monitoring TOPSEC firewall/UTM appliance (IDS rule/alert-threshold status) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the TOS-IDS::idsPortscan OID value, configure state conditions and alerts, and monitor any TOPSEC firewall/UTM appliance (IDS rule/alert-threshold status) from a single console.
OID Breakdown
Upper-level ancestors (10 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.14331 | topsec | TOS-SMI |
| 1.3.6.1.4.1.14331.5 | topsecMgmt | TOS-SMI |
| 1.3.6.1.4.1.14331.5.5 | objects | TOS-SMI |
| 1.3.6.1.4.1.14331.5.5.1 | tosMib | TOS-SMI |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.14331.5.5.1.11 | tosIDS | TOS-IDS |
| 1.3.6.1.4.1.14331.5.5.1.11.14 | idsPortscan | TOS-IDS |