Security researchers are warning of the availability online of a list of IoT devices and associated telnet credentials. The list has been available on Pastebin since June, but last week it was also shared via Twitter by the researcher Ankit Anubhav becoming rapidly viral. Many IoT devices included in the list have default and well-known credentials (i.e., admin:admin, root:root, or no authentication required) Most of the reachable IPs (61 percent) were located in China.”]
Source: http://securityaffairs.co/wordpress/62365/iot/iot-devices-credentials-leaked.html