Or I mean, Shodan exists. I'm sure the gov has better.

A theoretical botnet I was looking at on github used shodan to identify possible targets to infect.