 Simple network devices often make great zombies because they are commonly both underused (idle) and built with simple network stacks which are vulnerable to IP ID traffic detection.While identifying a suitable zombie takes some initial work, you can keep re-using the good ones.Alternatively, there have been some research on utilizing unintended public web services as zombie hosts to perform similar idle scans.