i have been using Mikrotik Routers since year and user manager  but i haven't seen this issue before in logs  as long as the credit is accepted after rejected it seems  strange for me i have seen this couple times this week  i am using ccr1009 and latest version 6.35.4

Could the user 61792721 have saved the wrong password on their browser and simply needs to correct it?

Too many failed attempts right after each other could indicate a script trying to guess passwords.
I don't think this is the case.

Nothing to get worried about yet.