You could probably achieve better here by providing fake weak credentials and then getting an actual human to connect and check out the honeypot on as many IPs as possible.

CAPTCHAs are an example. Although I am not sure if they're a good example.