Hi Craigb,
Nice also to dive a little further into these attacks and how honeypots record them.
I saw a so-called Glastopf honeypot attack being recorded.
Read on that and the development of detection here: https://github.com/glastopf/glastopf/issues/3
posted by glaslos.
polonus
P.S. And also a lot of these attacks: cgi-bin/comments/netscape.hst/editor/components/com_v
Read on these: http://www.scribd.com/doc/151644566/Google-Hacks
And down-under-land is attacked via honeytrap.pcap.port.19 probes rows and rows of it.
Look here: http://www.securetelligence.com/telligenceboard-global-attacks
D