16
National markets
A passive, aggregate census of cold-chain and building controllers — Danfoss, Dixell, Carel and RDM — that respond on a public IP address across sixteen European national markets. It counts reachable devices. It does not test, touch or log in to any of them.
distinct public IP addresses running a refrigeration or cold-chain controller that is potentially exposed to the open internet. This is a floor, not a total.
Each country is shaded by the number of exposed hosts the census found there, and ringed by a marker sized on the same scale. Click a country to pin its figures.
How to read the map. Every figure on this page is aggregated to a national market — a country total. A marker is not a pin on any individual host; it is the count for a whole country, placed near its centre only so the eye can find it. No addresses, hostnames, operators, certificate names or banners appear anywhere on this site. Countries with no marker are simply not yet surveyed, not clear.
Shares of the 4,853 distinct hosts. The four figures add up to more than the headline because a single host can answer with more than one maker's fingerprint.
Passive fingerprint matches across 28 country × maker cells. The raw haystack, before any de-duplication.
The same host counted more than once — a second port, a second maker fingerprint, a repeat survey. Collapsed to one host.
What remains after de-duplication: the unique hosts that make up the headline floor.
Sixteen European countries are covered. The rest of the continent is not yet surveyed — absence here means unmeasured, never safe.
In 20 of the 28 cells the query hit a result ceiling, so the true count is higher than shown. Every figure is a lower bound.
Aggregate country and maker totals only. Per-host data is held privately so it can reach the national CERTs and the makers who can act on it.
Three things push the real number above 4,853. Coverage stops at sixteen national markets, so every unsurveyed country adds hosts this census never saw. In most cells the data source capped how many results it would return, truncating the count before it finished. And passive fingerprinting only recognises devices that answer in a way we already have a signature for — anything behind a reverse proxy, on a non-standard port, or newly modelled slips past.
So read 4,853 as the smallest number consistent with the evidence. The honest statement is "at least this many," and the trend — up 57.7% as soon as we widened coverage — is what you would expect from a floor that moves whenever we look harder.