I disable password authentication for ssh, so I tend to rarely look at these extremely commonplace attempts.

Obviously best thing is to also lock ssh access down to a jump host or two, but that’s not always feasible.