SSH'ing...

[Pulsar]

Ok, so my ftp server is getting nailed by a computer in china with repeated hack attempts.

Out of curiosity I portscanned the offending computer. It spat out a bunch of open ports - the most interesting being an SSH port.

The box, when http'd to, is an apache server that has never been changed from the "It worked" http screen you get when you set it up.

I've never dealt with SSH in the least. Is there a way to figure out what computer is use the SSH connection? When I connect to the port it gives me the SSH version number, etc. Please note - I don't want to hack this thing, I just want to trace it back to the offending computer.

 

[Kaido]

Just be careful about doing anything to someone else's computer...they may not even know their computer is doing it! For some good reading check out this article, it's a real eye-opener:

http://www.grc.com/dos/grcdos.htm

 

[Nothinman]

Is there a way to figure out what computer is use the SSH connection?

You mean which computers are currently SSH'd into that box? Not without logging in or sniffing the traffic going to/from that machine's NIC.