diff --git a/network/ftp-default-credentials.yaml b/network/ftp-default-credentials.yaml
new file mode 100644
index 0000000000..f8ef8e5479
--- /dev/null
+++ b/network/ftp-default-credentials.yaml
@@ -0,0 +1,20 @@
+id: ftp-default-credentials
+
+info:
+  name: FTP Service with default credentials
+  author: pussycat0x
+  severity: low
+  tags: network,ftp,default-login
+
+network:
+
+  - inputs:
+      - data: "USER anonymous\r\nPASS anonymous\r\n"
+    host:
+      - "{{Hostname}}:21"
+      - "{{Hostname}}"
+
+    matchers:
+      - type: word
+        words:
+          - "230"
\ No newline at end of file
diff --git a/network/ftp-default-creds.yaml b/network/ftp-weak-credentials.yaml
similarity index 74%
rename from network/ftp-default-creds.yaml
rename to network/ftp-weak-credentials.yaml
index 7b1e8b82c9..d3d5380725 100644
--- a/network/ftp-default-creds.yaml
+++ b/network/ftp-weak-credentials.yaml
@@ -1,7 +1,7 @@
-id: ftp-default-credentials
+id: ftp-weak-credentials
 
 info:
-  name: FTP Service with default credentials
+  name: FTP Service with weak credentials
   author: pussycat0x
   severity: critical
   tags: network,ftp,default-login
@@ -18,9 +18,7 @@ network:
       username:
         - admin
         - root
-        - anonymous
       password:
-        - anonymous
         - password
         - toor
         - nas