Agreed, it's mostly old bots trying to take over wordpress sites and serve malware. That's about it. For a while, I gathered attempted usernames. I created a

Agreed, it's mostly old bots trying to take over wordpress sites and serve malware. That's about it. For a while, I gathered attempted usernames. I created accounts for all the usernames, set a null password on my chroot sftp server. I was really hoping they would try to upload something interesting. Nope. If they can't get a standard shell, they just keep retrying in a loop, forever. I've had the same bots hitting my server every few minutes for several years. No harm, no foul, I let them have at it.