u could take a common name list from one domain and search and replace with another, it must be something like that if the common ones get hit faster
or previous account user was on a list,
and as trixxxia said they scan them but when they do so often start with the common name then run alphanumeric combos off that
then try the next name etc.. .
