I believe this indicates someone is trying to break into my system.  Is there 
a way to deal with this kind of attack? Other than turning off ssh, that is.

#netstat | grep ssh
tcp        0      0 myserver.mydomain:ssh mybox.mydomain:57817 ESTABLISHED 
tcp        0      0 myserver.mydomain:ssh 211.146.113.178:38628   TIME_WAIT   
tcp        0      0 myserver.mydomain:ssh 211.146.113.178:37353   TIME_WAIT   
tcp        0      0 myserver.mydomain:ssh 211.146.113.178:38442   TIME_WAIT   
tcp        0      0 myserver.mydomain:ssh 211.146.113.178:38990   TIME_WAIT   
tcp        0      0 myserver.mydomain:ssh 211.146.113.178:38257   TIME_WAIT   
tcp        0      0 myserver.mydomain:ssh 211.146.113.178:37178   TIME_WAIT   
tcp        0      0 myserver.mydomain:ssh 211.146.113.178:37533   TIME_WAIT 

-- 
Check the headers for your unsubscription address
For additional commands send e-mail to suse-linux-e-help@suse.com
Also check the archives at http://lists.suse.com
Please read the FAQs: suse-linux-e-faq@suse.com