The numbers are a bit lower if you exclude honeypots (~2k hosts): https://www.shodan.io/search/report?query=rockwell+port%3A44818+tag%3Aics https://www.shodan.i

The numbers are a bit lower if you exclude honeypots (~2k hosts): https://www.shodan.io/search/report?query=rockwell+port%3A44818+tag%3Aics https://www.shodan.io/search/report?query=rockwell+port%3A44... And the problem has actually gotten better over the years: https://trends.shodan.io/search?query=tag%3Aics+rockwell https://trends.shodan.io/search?query=tag%3Aics+rockwell The situation used to be worse with things like the Lantronix password recovery service (i.e. a UDP port that would just send you the device password without any auth). It's still not ideal and takings things offline isn't easy (https://blog.shodan.io/taking-things-offline-is-hard/ https://blog.shodan.io/taking-things-offline-is-hard/) but it's getting better (slowly).