The results are in! After one month I saw 214,442 malicious login attempts to the honeypot:
Telnet made up almost half of these connections, with 99,840. Followed by SSH (60,964 connections) and VNC with 52,942 connections. We only saw about 600 HTTP/HTTPS connections, 20 FTP connections, and 10 SOCKS5 connections.
Check this list, if any of your passwords are on it, change them!!