Let me tcpwrap this for you
Oh, how I love my tcp wrapper:
$ egrep -c 'sshd.*refused connect from' /var/log/syslog/auth.log 297Install Tor and get listed in the directory. Wait a few days:
$ egrep -c 'sshd.*refused connect from' /var/log/syslog/auth.log 36418