The remote host is configured with default or easily-guessed credentials.
The ethernet modules on Modicon Quantum, Premium and Micro brand PLC's have an FTP server. The FTP server has one account that can be modified. The default account has the ability to load programs and change the configuration and programming of the PLC.
Change the username and password for the FTP server.