What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
A community post reports that a ZoomEye snapshot collected on September 20, 2026, found 9,820 Modbus service records and 585 EtherNet/IP service records, alongside 173 Siemens S7 records. These are address-level fingerprint matches—not counts of factories, confirmed vulnerable devices, or evidence of compromise. They are best treated as leads for authorized asset validation.
What the ZoomEye measurement reports
In a DEV Community article, yutianle says three product-fingerprint queries were run against ZoomEye’s combined dataset on September 20, 2026: app="Modbus", app="EtherNet/IP", and app="Siemens S7". The author defines a record as one observed service on one address. The reported results are:
| Fingerprint query | Reported service records | Leading country facet |
|---|---|---|
| Modbus | 9,820 | Cyprus — 3,986 records |
| EtherNet/IP | 585 | United States — 199 records |
| Siemens S7 | 173 | Germany — 90 records |
All counts and facets in the table are the post’s reported measurement, not independently reproduced totals from a primary ZoomEye export. The author describes them as fingerprint matches in a combined dataset, not validated counts of vulnerable devices or operating facilities. Read the measurement post.
What a record—and a match—means
One record represents an observed service at one address. It does not establish one distinct organization, site, facility, or industrial process: multiple addresses or services may relate to the same organization, while an address may not map cleanly to a facility.
#1 Best Overall
- DEVICE INTERFACE: 5 x 10/100Mbps Ports; 4-Pin Removable Terminal Block; LED Indicators
- TRENDnet LIFETIME PROTECTION: We stand by our products. The TI-E50 5-Port Industrial Switch is secured with Lifetime Manufacturer Protection from TRENDnet.
- NDAA + TAA COMPLIANT: With our NDAA and TAA compliant Industrial switches, you can plan and install networking solutions that Government customers demand today (U.S. and Canada Only)
- RELIABLE TECH SUPPORT: Our team of advisors, support and tech experts are English speaking, and available for all your needs during normal business hours. We take pride in being there for our customers.
- FAST ETHERNET PORTS: This industrial hardened switch features five 10/100Mbps ports for high-speed device connections up to 200Mbps full-duplex per port with 1Gbps total switching capacity.
A fingerprint match supports a narrower conclusion: a service responded in a way ZoomEye associated with the queried protocol at the observed address. It does not confirm a vulnerability, compromise, or unsafe control. Nor does the snapshot distinguish a production controller from a test rig, building-management system, simulator, or other endpoint. Public reachability is a reason for the responsible asset owner to investigate, not proof of operational importance.
How to read the country facets
The reported leading facet for Modbus is Cyprus, with 3,986 records; the post does not establish why that cluster is so large. Its author suggests it could reflect hosting, research or honeypot infrastructure, or scanning artifacts, but leaves the cause unresolved. The reported EtherNet/IP and Siemens S7 leaders are the United States (199 records) and Germany (90 records), respectively.
Rank #2
- 10/100/1000Mbps Ethernet – The Industrial 5 ports Ethernet Switch have 5 RJ45 ports 10/100/1000Mbps half/full duplex.
- Small Size – The 5 ports Ethernet Switch size is 3.74x2.76x1.18in, it only need small space to install.
- ELECTRO MAGNETIC COMPLIANT & Surge Protection – Industrial DIN-rail switch complies with CE EN 55022 Class A standards, with surge protection design.
- Industrial Grade Quality – The Hardened Mini Gigabit Switch use industrial grade components and aluminum housing, it can work at wide range temperature -40°C to 75°C (-40°F to 167°F). You can use it in outdoor harsh environment.
- Din-Rail & Wall Mount –The media converter come with 35mm Din-rail Clip and Wall mount accessories.
These are country labels inferred from observed IP addresses, not verified facility locations. Hosting providers, VPN egress, and carrier-grade NAT can separate an address’s apparent country from the location of the device or site behind it. The counts therefore should not be used to claim that Cyprus has the most exposed industrial facilities or to rank countries by industrial security risk.
Protocol security is not all-or-nothing
Modbus and Modbus Security
Traditional Modbus TCP uses port 502. The Modbus Organization also specifies Modbus Security, which encapsulates Modbus packets in TLS and uses X.509v3 certificate authentication and message-integrity protection on port 802. The organization describes it as protection provided by combining TLS with the traditional Modbus protocol. The existence of this specification does not show that a particular device supports it or has it enabled. See the Modbus specifications and the Modbus Security announcement.
Rank #3
- DEVICE INTERFACE: 8 x 10/100Mbps Ports; 4-Pin Removable Terminal Block; LED Indicators
- ULTRA MINI HOUSING: Industry leading compact mini housing design. One of the smallest switches in the industry with dimensions of 3.34” x 3.14” x 1.53” allow for space saving installation nearly anywhere.
- NDAA + TAA COMPLIANT: With our NDAA and TAA compliant Industrial switches, you can plan and install networking solutions that Government customers demand today (U.S. and Canada Only)
- RELIABLE TECH SUPPORT: Our team of advisors, support and tech experts are English speaking, and available for all your needs during normal business hours. We take pride in being there for our customers.
- FAST ETHERNET PORTS: This industrial hardened switch features eight 10/100Mbps ports for high-speed device connections up to 200Mbps full-duplex per port with 1Gbps total switching capacity.
EtherNet/IP and CIP Security
ODVA lists CIP Security as Volume 8 of its CIP Networks Library; its specification listing reports versions current as of April 2026. ODVA describes options including endpoint authentication, message integrity and authentication, and optional encryption. Capabilities are organized in profiles and vary by product, so the protocol’s security options should not be mistaken for protections implemented by every EtherNet/IP device. Consult ODVA’s specification listing and CIP Security overview.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How operators can use the snapshot responsibly
- Compare observations with an authorized inventory. Check public-facing observations against the organization’s asset inventory and records of approved external services.
- Validate apparent matches before changing anything. Confirm asset ownership, service identity, device role, network path, and whether public reachability is intended. A fingerprint alone is not enough to identify the endpoint’s operational function.
- Investigate unexplained results. A public observation missing from the inventory may indicate an unknown asset or an incomplete record; establish what it is and who is responsible before remediation.
- Reduce unnecessary exposure using the deployment’s risk and architecture. Apply network segmentation and access controls appropriate to the environment, and consider secure protocol capabilities where supported and approved. Encryption alone does not make an unnecessarily public service appropriate.
The value of a snapshot like this is as a prompt to verify an organization’s own exposure. It is not a facility census, a vulnerability scan, or a measure of national industrial risk.
Quick Recap
Rank #4
- DEVICE INTERFACE: 8 x Gigabit Ports; 3-Pin Removable Terminal Block; LED Indicators
- ULTRA MINI HOUSING: Industry leading compact mini housing design. One of the smallest switches in the industry with dimensions of 3.93” x 3.16” x 1.53” allow for space saving installation nearly anywhere.
- NDAA + TAA COMPLIANT: With our NDAA and TAA compliant Industrial switches, you can plan and install networking solutions that Government customers demand today (U.S. and Canada Only)
- RELIABLE TECH SUPPORT: Our team of advisors, support and tech experts are English speaking, and available for all your needs during normal business hours. We take pride in being there for our customers.
- GIGABIT PORTS: This industrial network Ethernet switch features eight copper gigabit ports for high-speed device connections
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Recommended Free Tools
