iMac hard drive spins up every 5 minutes while asleep
The issue is pretty self explanatory. When I put the mac to sleep, the hard drive will spin up on its own volition for a minute, every 5-15 minutes, while the display is off. Not a big fan, considering I like to sleep my mac specifically to quiet it, and not needlessly waste power / hard drive cycles while not in use.
Through some troubleshooting, I've trial-and-errored my way to the console messages that are logged related to this event.
iMac com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.user.501): Service "com.apple.xpc.launchd.unmanaged.loginwindow.106" tried to register for endpoint "com.apple.tsm.uiserver" already registered by owner: com.apple.SystemUIServer.agent
--- last message repeated 1 time ---
iMac syslogd[56]: ASL Sender Statistics
iMac timed[2654]: settimeofday({0x5cafa85f,0x61088}) == 0
iMac com.apple.xpc.launchd[1] (com.apple.imfoundation.IMRemoteURLConnectionAgent): Unknown key for integer: _DirtyJetsamMemoryLimit
iMac com.apple.xpc.launchd[1] (com.apple.quicklook[2666]): Endpoint has been activated through legacy launch(3) APIs. Please switch to XPC or bootstrap_check_in(): com.apple.quicklook
iMac Google Chrome[453]: notify name "com.apple.system.powersources.timeremaining" has been registered 20 times - this may be a leak
The suspicious lines to me, seem to be
iMac com.apple.xpc.launchd[1] (com.apple.xpc.launchd.domain.user.501): Service "com.apple.xpc.launchd.unmanaged.loginwindow.106" tried to register for endpoint "com.apple.tsm.uiserver" already registered by owner: com.apple.SystemUIServer.agent
Which, to my untrained eye, immediately looks like someone trying to hack my computer remotely.
And;
iMac com.apple.xpc.launchd[1] (com.apple.imfoundation.IMRemoteURLConnectionAgent): Unknown key for integer: _DirtyJetsamMemoryLimit
From my research Jetsam is related to RAM management. Why is my 'JetsamMemoryLimit' integer missing? Obviously, a hacker who's circumventing the RAM manager to run malicious software unhindered.
iMac Google Chrome[453]: notify name "com.apple.system.powersources.timeremaining" has been registered 20 times - this may be a leak
Is the hacker.. Google?!
iMac 21.5", macOS 10.13