I recently came on a site with this as a result of a portscan:
TCP: 63.xxx.xx.xx[21-ftp]
TCP: 63.xxx.xx.xx[22-ssh]
TCP: 63.xxx.xx.xx[23-telnet]
TCP: 63.xxx.xx.xx[25-smtp]
TCP: 63.xxx.xx.xx[80-www-http]
TCP: 63.xxx.xx.xx[111-sunrpc]
TCP: 63.xxx.xx.xx[113-auth]
TCP: 63.xxx.xx.xx[587-submission]
TCP: 63.xxx.xx.xx[725]
TCP: 63.xxx.xx.xx[873-rsync]
TCP: 63.xxx.xx.xx[1114-mini-sql]
TCP: 63.xxx.xx.xx[2049-nfs]
TCP: 63.xxx.xx.xx[3306-mysql]
TCP: 63.xxx.xx.xx[6711-backdoor]
also the serverstatus of the server (apache) was accessible.
I'm sure it's easy to hack it but I didn't try.
I mailed the webmaster about the problems and the director of the company(wow, they took it very serious) replied. I don't understand that a server can be that open, it' s just not human any more. I'm not posting the adress of the site so some malicious kiddie can't deface the site or something