Intrusion Prevention



This indicates detection of an attempted scan from S7comm Scanner.
The signature detects for S7comm Plus requests from the scanner at a rate of 4 per second.

Affected Products

S7 300/400 PLC with s7comm protocol


Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.

Recommended Actions

Monitor the traffic from that network for any suspicious activity.