ZoomEye: 505,545 MikroTik RouterOS devices expose SSH to the internet

A ZoomEye measurement on 15 October 2026 found 505,545 MikroTik RouterOS instances reachable over SSH from the internet — the precondition for the RouterOS flaws described by CERT Polska on 5 September 2026. Another 831,147 RouterOS assets had SSH identified as a service, and 573 devices exposed management port 8291.

• Query app="MikroTik RouterOS" && port="22" returned 505,545 matches
• service="ssh" && app="MikroTik RouterOS" — 831,147 instances
• os="RouterOS" && port="22" — only 9,536 matches
• Management port 8291 exposed on 573 devices