I'm building a new box at work and I waited a bit with ratelimiting ssh
connections (ssh is already configured to only allow valid accounts with
pre-established keys). The result of one night..:
# egrep -c 'sshd.*(Invalid user|not allowed)' auth.log
2179