Neat solution using SSH banner, extra points for originality. I prefer more elaborate honey pots that harvest attackers' commands for analysis but they are more difficult to setup and manage. This is certainly a decent solution for most people.