Calc last failed login user with source ip on Linux

sudo lastb |grep ssh \
  |awk '{ count[$3]++} END{ for(ip in count) print ip, ": " count[ip]}' \
  |sort -nrk 3