Back when nmap first came out I used it to do something somewhat similar though on a much smaller scale. I was 15 or so and I did zone transfers on all the nam

Back when nmap first came out I used it to do something somewhat similar though on a much smaller scale. I was 15 or so and I did zone transfers on all the name servers listed in the file on Arins ftp site than scanned all the addresses I got back using nmap. It was pretty interesting the results I got back though I had to stop when I was about 80% through the list as a sysadmin in California complained to my ISP and I was threatened with disconnection.