Unipi Technology Patron S107 / S117 Modbus register map

Also covers Patron S117

Modbus TCP PLC unit with 4 digital inputs, 4 digital outputs, 1 analog output and 1 analog input

Official
96 registers
Modbus TCP
Revision 3 · 2026-11-10
Identity: firmware, serial number

Official: Written from the manufacturer's documentation, but not tested on a device yet. Check the map against the manufacturer's documentation before you write to a live device. Tested it? Report a test.

Download .mbmap.json Raw JSON View on GitHub Suggest a correction Report a problem

Communication

Protocol: Modbus TCP
Unit ID: 0
TCP port: 502
Byte / word order: ABCD · bytes big-endian, words high first
Addresses: 0-based

Connection values are defaults: the device may be configured differently.

Map

Registers: 80 holding registers, 16 coils
Groups: 14
Translation tables: 2
Revision: 3 · 2026-11-10
Added: 2026-11-10 (2026-11-10)
File: maps/unipi/patron-s107-s117.mbmap.json · 21 KB · history
SHA-256: b659e6acc23178330d56d84f6cb8b1237455de1b75af19c238b04188fb26d823
Manufacturer: www.unipi.technology

Device identity

What a tool can read to check that this map fits the connected device (SPEC.md section 4.7). Registers with a role are read like any other register.

Registers
Role	Register	Address	Type	Values
Firmware	Firmware Version	holding 1000	uint16
Serial number	PCB Serial Number	holding 1005	uint32 ABCD

Sources and notes

Patron S107 Modbus map · version 2.0
Registers and Coils sheets
Patron S117 Modbus map · version 2.0
Registers and Coils sheets

Source: Patron S107 Modbus map v2.0, Unipi technology; Patron S117 Modbus map v2.0, Unipi technology, Unipi knowledge base page https://kb.unipi.technology/en:hw:04-extensions:downloads

Registers are 0-based and use the Unit 0 addresses of the document, which cover every section of the device. Multi-register values (32-bit counters, serial number, floats) are read here with the most significant register first, as the document states.
Reserved, obsolete and internal registers, and registers reachable only through a section unit (Unit 1 to 3), are left out.
The documents of S107, S117 list identical registers, so they share this map.

Area	Address	Type	Access	Unit	Scale	Description
HR	0	bool bit 0	R
HR	0	bool bit 1	R
HR	0	bool bit 2	R
HR	0	bool bit 3	R
HR	1	bool bit 0	RW
HR	1	bool bit 1	RW
HR	1	bool bit 2	RW
HR	1	bool bit 3	RW
HR	5	uint16	R			Reference voltage of the MCU (raw)
HR	6	bool bit 0	RW
HR	6	bool bit 1	RW
HR	8	uint32 ABCD	RW			Pulse counter; writable to reset
HR	10	uint32 ABCD	RW			Pulse counter; writable to reset
HR	12	uint32 ABCD	RW			Pulse counter; writable to reset
HR	14	uint32 ABCD	RW			Pulse counter; writable to reset
HR	16	uint16	RW			PWM duty cycle of the digital output
HR	17	uint16	RW			PWM duty cycle of the digital output
HR	18	uint16	RW			PWM duty cycle of the digital output
HR	19	uint16	RW			PWM duty cycle of the digital output
HR	20	bool bit 0	RW
HR	20	bool bit 1	RW
HR	20	bool bit 2	RW
HR	20	bool bit 3	RW
HR	21	bool bit 0	RW
HR	21	bool bit 1	RW
HR	21	bool bit 2	RW
HR	21	bool bit 3	RW
HR	22	bool bit 0	RW
HR	22	bool bit 1	RW
HR	22	bool bit 2	RW
HR	22	bool bit 3	RW
HR	1000	uint16	R			Firmware version of the section (raw number)
HR	1001	uint16 bits 0–7	R
HR	1001	uint16 bits 8–15	R
HR	1002	uint16 bits 0–3	R
HR	1002	uint16 bits 4–7	R
HR	1002	uint16 bits 8–15	R
HR	1003	uint16	R
HR	1004	uint16	R
HR	1005	uint32 ABCD	R
HR	1007	bool bit 0	RW
HR	1007	bool bit 1	RW
HR	1007	bool bit 2	RW
HR	1007	bool bit 3	RW
HR	1008	uint16	RW	ms
HR	1009	uint16	R			Reference voltage of the MCU (raw)
HR	1010	uint16	RW	ms	×0.1	Raw unit is 100 us
HR	1011	uint16	RW	ms	×0.1	Raw unit is 100 us
HR	1012	uint16	RW	ms	×0.1	Raw unit is 100 us
HR	1013	uint16	RW	ms	×0.1	Raw unit is 100 us
HR	1014	bool bit 0	RW
HR	1014	bool bit 1	RW
HR	1014	bool bit 2	RW
HR	1014	bool bit 3	RW
HR	1015	bool bit 0	RW
HR	1015	bool bit 1	RW
HR	1015	bool bit 2	RW
HR	1015	bool bit 3	RW
HR	1016	bool bit 0	RW
HR	1016	bool bit 1	RW
HR	1016	bool bit 2	RW
HR	1016	bool bit 3	RW
HR	1017	uint16	RW
HR	1018	uint16	RW
HR	1019	uint16	RW
HR	1020	uint16	RW
HR	1021	uint16	RW
HR	1022	uint16	RW
HR	1023	uint16	RW
HR	1024	uint16	RW
HR	1025	uint16	RW
HR	1026	uint16	RW
HR	1027	uint16	RW
HR	1028	uint16	RW
HR	1029	uint16	RW
HR	1030	uint16	RW
HR	3000	float32 ABCD	RW			Value in the unit of the configured mode (V, mA or ohm)
HR	3002	float32 ABCD	R			Value in the unit of the configured mode (V, mA or ohm)
HR	4000	uint16	R	%
HR	4001	uint16	R	%
CO	0	bool	RW
CO	1	bool	RW
CO	2	bool	RW
CO	3	bool	RW
CO	4	bool	R
CO	5	bool	R
CO	6	bool	R
CO	7	bool	R
CO	8	bool	RW
CO	9	bool	RW
CO	10	bool	RW
CO	11	bool	RW
CO	1000	bool	RW			Clears the MWD reboot indication
CO	1001	bool	RW			Enable or disable the 1-Wire bus
CO	1002	bool	W
CO	1003	bool	W			Stores the current configuration so it is used at startup

Help improve this map

I tested it on a deviceReport whether it worked, even if you did not write the map.
Suggest a correctionEdit the file on GitHub; it opens a pull request.
Report a problemA wrong address, type, scale or byte order.
Read the formatWhat each key of the file means (SPEC.md).