Is this really happening on the S9's?
I'm a noob to mining, but as an IT person, (if the above is true) shouldn't this be something to investigate?
I have suspected something like this. I have blocked some unknown traffic from my R4. I am working on getting a Raspberry Pi with ckproxy set up to attach to my R4 as an intermediary to get more info. I'm not physically at its location most of the time to monitor over the LAN in person