Shodan! Proudly holding a membership to that for monitoring all my internet connected services!
It’s how I discovered an old ISP’s router had a non-configurable TR-069 accessible via the internet, that had its remote access controlled via their firewall to prevent external access. Move ISP? It becomes exposed!