File Transfer Protocol — test anonymous login and check for writable dirs.
nmap -p21 -sV -sC $t
ftp $t # user: anonymous, pass: anonymous
curl -s ftp://$t/ --user anonymous:anonymous
hydra -L users.txt -P pass.txt ftp://$t