143 - IMAP

# Nmap scan
nmap -v -sV --version-intensity=5 --script imap-capabilities -p T:143 <IP>

# Banner grabbing
telnet <IP> 143

# Banner grabbing and test connection
nc -nv IP 143
A1 LOGIN “root” “”
A1 LOGIN root toor
A1 LOGIN root root