Intrusion Prevention

ISF.S7-300.S7-400.S7comm.Scanner

Description

This indicates detection of an attempted scan from S7comm Scanner.
The signature detects for S7comm Plus requests from the scanner at a rate of 4 per second.

Affected Products

S7 300/400 PLC with s7comm protocol

Impact

Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.

Recommended Actions

Monitor the traffic from that network for any suspicious activity.