FYI I sent just one to get a data point.
-------- Forwarded Message -------- Subject: Possible Abuse of Apache SpamAssassin update servers Date: Tue, 21 Nov 2017 08:14:01 -0500 From: Kevin A. McGrail <[email protected]> To: [email protected] CC: [email protected] <[email protected]> Hello, We show 24441 downloads of files from 176.61.138.136 in 21 days on just one of our mirrors. We publish at most 1 ruleset per day which could be a file and a few signature/verification files. We would like to know more about this IP and it's behavior. Is it NATTING a ton of boxes? Is it out of disk space and just downloading over and over? Etc. Please advise! Regards, KAM -- Kevin A. McGrail Asst. Treasurer & VP Fundraising, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project
