listing the unique login user name attempts

:$ zgrep ssh /var/log/auth*|grep "Invalid user"|cut -d ' ' -f 8|sort|uniq -c|sort -n|tail -n 17

I've got,

       1 router
       1 sido
       1 test
       1 ubuntu
       3 oracle
 2381 user

Great script, that....