I think this was posted on HN a few months ago:

http://internetcensus2012.bitbucket.org/paper.html

They ran their own botnet to map the internet, and then discovered other malware already running on insecure home routers.