Shodanhq.com is awesome.
These are fun:
Many sites running old PHP from 2006. Edit as desired to find an old php target.
Incredible how many sites still use ASP .NET 1.x
Web management pages for Cisco devices that have authentication disabled.
Ancient versions of Apache still in use (Note: url has a dot at the end)
IIS 3.0 !