Scan for S7 controllers in your network

Scan for S7 controllers in your network

You may know the problem: You simply do not know the IP address of your Siemens S7 anymore. We can now provide a remedy for this issue. We will show you an easy S7 network scan.

S7 1200 SPS

Simply scan for all available Simatic S7 PLCs in your local network. A scan via a VPN is also possible. With the free PLC scanner software, you can see every connected S7 PLC in seconds, incl. IP address and further info.


What you need for scanning

The setup is quite simple. You need:

PC with Windows 10 or 11
Connection from this PC to the control network
Scan software

Setup S7 network scan

Of course, one or more S7 PLCs are also required. This can be any model of the Siemens S7 series. It is important that the PLC CPU has a Profinet connection, alternatively a CP, e.g. a CP 343-1 lean is suitable.

How to do it

Perform scan

The actual scan is done via Ethernet, so RPC 1006, sometimes called S7 direct. We assume Siemens S7 controllers in this article. This tutorial works for S7 300, S7 400, S7 1200, S7 1500 and similar products from Siemens or Vipa.

With our network scan software, the “PLC Scanner”, you can now scan for controllers in the network. To do this, simply select the menu item “Network” in the left navigation.

Network scan of S7 controllers

You have the choice whether you simply want to scan automatically in the connected network, or whether you want to perform a manual scan in a network that is hidden, perhaps behind a router.

Especially for larger networks, or if you scan over a VPN, you should specify the network manually. Under such circumstances, routing must also be taken into account.

Single S7 scan

Read out details

If the result list of the network scan does not provide you with enough details, then you can also read out an individual PLC completely. To do this, select the “Scan” menu item in the navigation.

Measurements can be easily performed with the free PLC Scanner software

The following data is displayed:

scan yourself

Download for free

If you want to scan your network for S7 controllers yourself, just fill out this form and we will send you the download link to the software by mail.

You are currently viewing a placeholder content from HubSpot. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.

More Information


With the PLC-Scanner software, you can easily and quickly find S7 CPUs in your network. Details of the individual CPUs can also be read out. The setup is simple and the software is free of charge.

Related posts


DataSuite News EN 1/23

You know our DataSuite software and therefore know that it is very versatile and offers many functions. In conversations with customers, I notice again and again that particularly exciting features are often not known. I have therefore compiled some interesting little-known features in this newsletter.

more »
uploaded HTML file in the browser

DataSuite News EN 5/22

wouldn’t it be nice if you could provide data of machines and plants easily and quickly as web pages? Maybe even with a diagram and your logo? We have built exactly this function and many more into our [MB] DataSuite. Forget the S7 web server and use the fast and easy alternative in the form of our software.

more »
Das "Hexagon" von Wissen

DataSuite News EN 4/22

After a long search we have found a new home. From now on you will find us in the middle of the city of Wissen (Sieg) in one of the most modern office buildings in the region.

more »