When your IoT Device Logs in as Admin, It?s too Late! [Guest Diary], (Wed, Mar 11th)

**Executive summary:** This guest diary documents active, automated scanning and brute-force exploitation of default or trivial credentials against IoT and networked devices observed in a honeypot and vulnerability assessment, reporting ~44k failed attempts, 1,286 successful logins, dominant credentials (e.g., root, 123456), HASSH fingerprints, and examples of post-compromise actions (persistence and password manipulation), and concludes with mitigation recommendations such as changing defaults, MFA, segmentation, and continuous monitoring.