Telnet-23

• brute force

hydra -l username -P ~/Documents/rockyou.txt ssh://$IP

• enumeration

nmap -n -sV -Pn --script "*telnet* and safe" -p 23 $IP -oN recon/nmap.telnet