Probably you set (I think it is the default) "mail" as warn system when SSH login fails... you should limit the SSH access to internals networks, or at least use dynamic dns.
I guess the allowed networks is the limit ? Its not a number you meant . Thanks
Perhaps there is a misunderstanding. I think that you have "any" in allowed networks. In this case everybody can try to contact you ASG using SSH. When a login fails, an email is sent. If you want to deny the connection from internet to your SSH consolle, you have to delete "any" from allowed networks (and specify for example Internal).
In any case you can also disable email alerts for ssh, but my advice is to mantain this option enabled (for security reasons).
