This is great, and elegant. I love a nice, relatively simple, self-selecting solution like this.

I have my own set of scripts that permanently bans IP addresses that have probed any non-service ports of my firewall.