From: Comparison of approaches for intrusion detection in substations using the IEC 60870-5-104 protocol
Code
Cause of transmission
1-127
standard definitions
128-135
reserved for message routing
136-255
special usage