Quote from: Lunga Chung on April 05, 2018, 07:39:26 PM

Quote from: milos957 on April 05, 2018, 05:25:18 AM

Something weird happened tonight on one of my two rigs. Early this morning I noticed on ethermine.org that one rig with 8xRX 480 cards did not work for about 5 hours.
https://imgur.com/a/dASLC
I approached the rig and, surprisingly, noticed that he worked steadily since the last restart I did about 8 hours before.
https://imgur.com/a/bLLTP
I checked the log file and I realized that there was no errors or restart in it. I reviewed the Task Manager and found that PhoenixMiner.exe on this rig uses about 887 MB of memory, which is roughly 441 MB more compared to the 8xRX 580 cards running steadily on ethermine.org, practically twice as much memory.
https://imgur.com/a/vL3r8
I restarted the rig and he reappeared at ethermine.org, but I noticed that after 5 minutes of work PhoenixMiner.exe used 558 MB of memory and after 8 minutes 887 MB of memory again.
I do not know how the Phoenix miner could work permanently, and that ethermine org shows it does not work. This is not about any kind of hacking on the side, I think the problem is in the miner itself, maybe it's a bag in the miner. I'd like to hear your suggestions.

Think this is related to the pool, I'm using Claymore same thing happen around 1:00 AM and restored at 5:00 AM. Also checked the miner everything looks good (didn't check the memory and CPU usage but my ping went from 60 to 12ms) I'm under impression that this might be related to dev fee pool switching and recreation of DAG file.

But one thing was strange, since miner was actually submitting shares, my share rate stayed the same.

https://i.gyazo.com/7ba77ddc0eb838c711d940ee0bab3276.png

Did you not see the answer from PhoenixMiner ?
It isn't a pool problem. This type of attack will continue at random as long as miners don't use the secure ssl connections.

From PhoenixMiner:
You have fallen victim of the MITM scamers (so called IP hijack attack). The IP address of the ethermine server was hijacked by hackers (this happens in your ISP, so it is not your rig's fault but the result is still the same. You can see the telltale sign of the 10000 MH difficulty, which is never used by ethermine (their jobs are always with 4000MH difficulty). Fortunately, there is quick and easy fix the prevent similar problems in the future: use the encrypted (SSL) address of ethermine like this: -pool ssl://eu1.ethermine.org:5555. Note that the address starts with ssl:// and the port is 5555.