Scan for S7 controllers in your network
You may know the problem: You simply do not know the IP address of your Siemens S7 anymore. We can now provide a remedy for this issue. We will show you an easy S7 network scan.

Simply scan for all available Simatic S7 PLCs in your local network. A scan via a VPN is also possible. With the free PLC scanner software, you can see every connected S7 PLC in seconds, incl. IP address and further info.
What you need for scanning
The setup is quite simple. You need:
PC with Windows 10 or 11
Connection from this PC to the control network
Scan software

Of course, one or more S7 PLCs are also required. This can be any model of the Siemens S7 series. It is important that the PLC CPU has a Profinet connection, alternatively a CP, e.g. a CP 343-1 lean is suitable.
Perform scan
The actual scan is done via Ethernet, so RPC 1006, sometimes called S7 direct. We assume Siemens S7 controllers in this article. This tutorial works for S7 300, S7 400, S7 1200, S7 1500 and similar products from Siemens or Vipa.
With our network scan software, the “PLC Scanner”, you can now scan for controllers in the network. To do this, simply select the menu item “Network” in the left navigation.

You have the choice whether you simply want to scan automatically in the connected network, or whether you want to perform a manual scan in a network that is hidden, perhaps behind a router.
Especially for larger networks, or if you scan over a VPN, you should specify the network manually. Under such circumstances, routing must also be taken into account.
Read out details
If the result list of the network scan does not provide you with enough details, then you can also read out an individual PLC completely. To do this, select the “Scan” menu item in the navigation.

The following data is displayed:
- CPU Type
- Status (Running/Stop)
- Serial number
- Time
- Deviation of the time from the PC time
- Some more details
Download for free
If you want to scan your network for S7 controllers yourself, just fill out this form and we will send you the download link to the software by mail.
Conclusion
With the PLC-Scanner software, you can easily and quickly find S7 CPUs in your network. Details of the individual CPUs can also be read out. The setup is simple and the software is free of charge.
Related posts

Retrofitting – Old machines with new possibilities
The useful life of solid machine technology is increased by retrofitting. Old machines and new possibilities.

DataSuite News EN 1/23
You know our DataSuite software and therefore know that it is very versatile and offers many functions. In conversations with customers, I notice again and again that particularly exciting features are often not known. I have therefore compiled some interesting little-known features in this newsletter.

DataSuite News EN 5/22
wouldn’t it be nice if you could provide data of machines and plants easily and quickly as web pages? Maybe even with a diagram and your logo? We have built exactly this function and many more into our [MB] DataSuite. Forget the S7 web server and use the fast and easy alternative in the form of our software.

DataSuite News EN 4/22
After a long search we have found a new home. From now on you will find us in the middle of the city of Wissen (Sieg) in one of the most modern office buildings in the region.

How to provide machine data as HTML-files
You may know it: You want to make machine data available to many users centrally, quickly and easily. Our DataSuite

Send SMS with a S7 PLC
When it comes to reducing unplanned downtime, problems can often arise. We offer you an easy way to keep track