Other techniques

Public route servers - http://www.traceroute.org
Search engines (web pages, usenet, mailing lists, etc)
Online databases, such as Netcraft
SEC filings
Social Engineering
Etc...