FYI I sent just one to get a data point.
-------- Forwarded Message -------- Subject: Possible Abuse of Apache SpamAssassin update servers Date: Tue, 21 Nov 2017 08:14:01 -0500 From: Kevin A. McGrail <kmcgr...@apache.org> To: n...@interconnects.us CC: priv...@spamassassin.apache.org <priv...@spamassassin.apache.org> Hello, We show 24441 downloads of files from 176.61.138.136 in 21 days on just one of our mirrors. We publish at most 1 ruleset per day which could be a file and a few signature/verification files. We would like to know more about this IP and it's behavior. Is it NATTING a ton of boxes? Is it out of disk space and just downloading over and over? Etc. Please advise! Regards, KAM -- Kevin A. McGrail Asst. Treasurer & VP Fundraising, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project
