It's nice from the scammer to have left us an ftp server, login and password:
I'm uploading some /dev/urandom to that, maybe that causes him some frustration.  

EDIT: That idiot has ssh on the box, and I managed to guess the root password (it wasn't hard). What do you think I should do?