How to turn a massive portion of unsecured IPv4-connected devices into a worldwide botnet. An absolute wealth of data hosted here, all available for personal download. Incredible work.
Internet Census 2012 - Port scanning /0 using insecure embedded devices
"The scan rate would be doubled if we deployed a scanner to the newly found device. After doubling the scan rate in this way about 16.5 times, all unprotected devices would be found; this would take only 16.5 hours. Additionally, with one hundred thousand devices scanning at ten probes per second we would have a distributed port scanner to port scan the entire IPv4 Internet within one hour.