IPs added to sshlockout even with SSH not exposed to WAN

[LucaTNT]

Hi everyone,
I have a question: I have SSH enabled on the LAN side, and on the WAN interface it should not be available. In fact, if I try to connect to port 22 of my WAN IP from outside my network it is not reachable.
However, I keep finding a couple IPs added to the sshlockout table, and they're not from my LAN subnet, so they must be coming from outside, I guess.

Any ideas why this happens? Am I missing something?

Thanks
Luca