From 0707e01119289c0aa88b253add8f3b63645e55c9 Mon Sep 17 00:00:00 2001
From: nnposter <nnposter@e0a8ed71-7df4-0310-8962-fdc924857419>
Date: Mon, 2 Feb 2026 02:10:09 +0000
Subject: [PATCH] Treat ftp-brute banner errors as connection failures. Close
 #3260

---
 scripts/ftp-brute.nse | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/scripts/ftp-brute.nse b/scripts/ftp-brute.nse
index 9a7a5653c..ae91ed1ce 100644
--- a/scripts/ftp-brute.nse
+++ b/scripts/ftp-brute.nse
@@ -60,7 +60,15 @@ Driver = {
     if not realsocket then
       return false, brute.Error:new( "Couldn't connect to host: " .. (code or message) )
     end
+    if not code then
+      realsocket:close()
+      return false, brute.Error:new( "Invalid response from host: " .. message)
+    end
     self.socket.socket = realsocket
+    if not (code >= 200 and code < 400) then
+      ftp.close(self.socket)
+      return false, brute.Error:new( "Error response from host: " .. code)
+    end
     return true
   end,