Never assume malicious intent when incompetence.

I have multiple devices that queries their update server every 15 seconds, which all shows up as the top 10 queried domain in my network.