List of failed SSH logins produced by `egrep -o "invalid user ([^ ]+?) " /var/log/auth.log | cut -d ' ' -f 3 | sort | uniq -c | sort -nk 1`

failed_logins

      1 .+?
      1 [^
      2 0000
      2 010101
      2 1111
      2 1234
      2 12345
      2 666666
      2 adm
      2 anna
      2 api
      2 centos
      2 dbadmin
      2 git
      2 gpadmin
      2 m
      2 music
      2 nginx
      2 openvpn
      2 operator
      2 osmc
      2 PlcmSpIp
      2 postfix
      2 prueba
      2 service
      2 sftpuser
      2 sysadmin
      2 telecomadmin
      2 telnet
      2 testing
      2 user1
      3 0
      3 ftp
      3 monitor
      4 admins
      4 alex
      4 angelo
      4 caagov
      4 cactiuser
      4 couchdb
      4 cron
      4 csm
      4 ctrls
      4 cyber
      4 dados
      4 default
      4 guest
      4 harrison
      4 hscroot
      4 jeffchen
      4 jekins
      4 jenkins
      4 multitrode
      4 mysql
      4 nsrecover
      4 oracle
      4 pgsql
      4 random
      4 s3ftp
      4 srvback
      4 steam
      4 storwatch
      4 test
      4 trixbox1
      4 user7
      4 vagrant
      4 vnc
      4 w6support
      4 www
      6 ADMIN
      6 ftpuser
      6 pi
      6 ubuntu
      6 user
      8 ([^
     16 usuario
     22 support
     24 ubnt
    146 admin