There are some notes about port scanning higher in the thread and in another post.
About hosts that respond on any port, scanme.nmap.org is one such, but there are many. The host does not have to have every port open (SYN/ACK response); it is enough if it exposes its closed ports (RST response).