08:00:22 <sech1> The stripe miner partially restored their operation
08:01:03 <sech1> they seem to be using supportxmr only this time, judging by the chart at https://miningpoolstats.stream/monero
14:33:36 <selsta> sech1: any idea here? https://github.com/monero-project/monero/issues/9356
14:34:20 <selsta> have you seen such reports before?
14:35:54 <moneromooo> If the address is unknown, then pwned (or misconfigured RPC access). If it were known, it could be the background mining, if creating a wallet and saying "yes" without thinking.
14:36:37 <selsta> it starts mining with 16 threads which I assume wouldn't be background mining
14:37:08 <moneromooo> I will add a comment.
14:39:36 <sech1> His command line doesn't enable public RPC
14:39:53 <sech1> So it must be something on his PC
18:32:54 <selsta> moneromooo: they got a log from the rpc call but netstat doesn't find anything on that port
18:46:12 <moneromooo> ty, replied
18:59:42 <sech1> can't they just run wireshark or something, and log all connections to port 18081?
19:02:27 <selsta> does wireshark show process id?
19:03:35 <sech1> no idea
19:04:02 <sech1> I know that lsof can give you process id for each open connection
19:04:23 <sech1> netstat too