ZoomEye scan finds 9,820 Modbus and 585 EtherNet/IP services exposed online
A ZoomEye scan dated September 20, 2026 found 9,820 Modbus services, 585 EtherNet/IP services and 173 Siemens S7 devices exposed to the public internet. Cyprus had the most Modbus devices at 3,986, the US led EtherNet/IP with 199, and Germany led S7 with 90.
- Modbus: 9,820 records, 41% in Cyprus
- EtherNet/IP: 585 records, US leads with 199
- Siemens S7: 173 records, 52% in Germany
- Protocols lack built-in authentication and encryption
Read next
Security