@Lando no. I am going to try disabling the relay. I suspect it is inbound federation activity