Where do bots get the information about my domain from?

When I check my logs I see bots trying to access subdomains that should not be referenced anywhere in the net. Where do they get their information about my domains and subdomains and what is the root source?