Duplicate: https://news.ycombinator.com/item?id=42706732
Hopefully nobody exposing a full rsync daemon to the web out there
Many public mirror sites do just that by design.