AAF uses the ‘standard’ luasocket FTP library. When you call ftp.put() with a string it is going to parse the URL, and maybe there is an issue with parsing special chars in a URL (not even sure # is acceptable char in there)
You could try the alternative format of that function that is to provide a table instead of string, so that you can provide individual fields and not rely on the URL parsing. See Lua Socket doc, here for instance: w3.impa.br/~diego/software/luaso … p.html#put)
If that does not work, the only quick workaround I can propose is to not use # in your password 
.
Let me know how the ftp.put with table works (or not).
BR,
Cuero