All good ideas...
I can't remember how many times I've been mapping the web (i'm trying to map my whole area of the web, or at least part of it) I've found a box running a couple dozen ports. Even a fingerd, sendmail on a non-server (usually running an old, easy to abuse, version of Sendmail), or the shell demon for Novel (allows unpassworded logins!)
