I've given your page a visit, quite informative & systematically written
Thank You
I was lucky enough to find that research has been done into SSH brute Force logins and was released by @ricci here on the FediVerse.
The research covers more than 512 servers and spans over a number of years. Unlike other research in this field the servers were not honeypots, but were used by legitimate users. This method gave clear insights into actual attackers behavior to servers, spanning over a number of networks and a number of years
This is a link to a toot where I refer to that research paper which is also linked
You may find the paper informative and useful
https://mastodon.bsd.cafe/@Dendrobatus_Azureus/115138580324553005