There is a technical difference here though. weev was actively initiating that connection to somebody else's server. In this case, the honeypot is sitting idly

There is a technical difference here though. weev was actively initiating that connection to somebody else's server. In this case, the honeypot is sitting idly, and _responding_ to someone else's connection (in a manner that's clearly unauthorised), and it's responding with something valid but unexpected. Not that I'd want my lawyer having to explain that difference to a jury...