Hacker News Reader

Maybe stashing a honeypot address in the known_hosts is a good idea?

It is, and what you're looking for is:

I don't see ssh as an option there?

You'd use a DNS canary.

Got it. Thanks.