Any suggestions for fake daemons to use to see scanners or malicious connections? Maybe some services I can run via inetd? They don't need to actually attempt user authentication, so just some that have greeting banners as appropriate to initiate use. I was looking for fake telnetd, imapd, ftpd for example.