Security researchers have all the fun.  This paper describes how the Strider HoneyMonkey Exploit Detection system uses active client honeypots (AKA "honey monkeys") to find web sites that exploit browser vulnerabilities. 

ftp://ftp.research.microsoft.com/pub/tr/TR-2005-72.pdf