I wanted to share because I didn't see anything in docs.
I had been working on a few system showing attempted ssh access from moscow and other locations, but mostly moscow.
I even changed the default ssh port to 4 digits and not default 22 but still seen in log files attempted ssh access. 8.x software with netconf I believe opens ssh port 830
issue looks to be resolved when blocking 830 on the acl
C100G#show run | be access-lis
ip access-list mgmt
11 deny tcp any any any 830
Hope this helps anyone who's been dealing with attempted ssh access