Most of these attacks are done with completely automated tools. Put in an IP range and off it runs. I doubt most users even realize when they get stuck in the honeypots. Just run the script and go off doing something else.