Hello,
yesterday I noticed an IP on my bitcoin node which was using like 6 connection slots and each had around 1 Gbyte outbound traffic.
I googled the IP and found this tweet: https://twitter.com/petertoddbtc/status/644557089872830464
with an answer from @finalhash which indicates this could be ...