The SSH daemon is configured to use the /etc/issue.net file to present a banner prior to login.
/etc/issue.net
References: AC-8a.