Industrial control: the annunciation (event/alarm) port of FOUNDATION Fieldbus High Speed Ethernet.
The Fieldbus Foundation, now the FieldComm Group, registered 1089, 1090, and 1091 for FOUNDATION Fieldbus HSE — the 100 Mbit Ethernet layer that connects linking devices, gateways, and controllers in process plants. 1089 carries annunciation, the event and alarm notifications published by field devices. Scanners and ICS asset-inventory tools use the trio 1089-1091 as the signature that a host is process-control equipment rather than IT equipment.
Do not expose
HSE was designed for a closed plant control network with no attacker on it — there is no meaningful transport security. It belongs on an isolated control network behind a firewall or data diode.
$ nmap -sV -Pn -p 1089-1091 TARGETSeen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.