nmap -sV -p 21,22,443,990 --script=ssl-cert,ftp-anon <target>

"Smart Fuzzing." Instead of brute force, focus on boundary cases.