""ET SCADA IEC-104 STOPDT (Stop Data Transfer) Confirmation""

SID: 2046163

Revision: 1

Class Type: protocol-command-decode

Metadata: affected_product IoT, attack_target IoT, created_at 2023_06_06, deployment Perimeter, deployment Internal, deployment Datacenter, performance_impact Low, confidence High, signature_severity Informational, updated_at 2023_06_07

Reference:

• Link

Protocol: tcp

Source Network: any

Source Port: 2404

Destination Network: any

Destination Port: any

Flow: established,to_client

Contents:

• Value: "|68 04 23 00 00 00|"

Within:

PCRE:

Special Options:

source