Was totally bored today.... So as an exercise made a lil tool that grabs & shows shodan data, list them, and also does some primitive default login attempts in case a link that uses http basic authentication is clicked. Some open webcam in Italy... Wanna play with someones router from Hong Kong? Also shows exploits from shodan database with search term. Only checked the first 100 or so from the listed 230 000 netgear routers and 14 of them had default login/password. So if the rest of the results are also around 14% then there is approximately 32 200 netgear routers listed by shodan that have default logins.
Added very old (from 2013) D-Link backdoor exploit. You can now automatically log in to pretty much any router (well almost any, except those with recent enough firmware ofc...) that has thttpd-alphanetwork as server tag, without password!
I clicked on the link, and noticed the misspelling of the word, candidate. "Also a running candinate:"