It is a bit out of control. I've written a small Python script [1] that finds dozens of vulnerable devices within minutes just by checking random IP addresses. There shouldn't be that many poorly secured devices floating around out there. It shouldn't be that easy to find them.

[1] https://github.com/wybiral/dex