I'm trying to find out if someone has hacked my computer. In case I get the following message in my Terminal window: "Last login: Tue Sep 30 02:02:18 on console" does that mean a person has logged in, or could it be an automatic programme running?

  • If your computer were hacked, you would probably have seen an ip address instead of console. I don't know what console means though, mine shows TTY## instead – LaX Sep 30 '14 at 11:03

Popmoi, the last login on console is exactly that: Somebody (likely you) logged into a bash session on your computer at 2:02:18 on Sep 30. Generally, 'console' is shown for the first shell login and then ttys000 would be the next. I see this every login/reboot for my Terminal group, which opens two bash sessions in different tabs.

| improve this answer | |
  • Thanks for your replies! I was asleep at 2:02:18. That said, I also checked my Console, but had no 'LidOpen' reported for that time. I have five ttys000 messages from around 13h today. My computer is a Macbook. I really want to find out if someone hacked my computer, but also need to be 100% sure. – Popmoi Sep 30 '14 at 11:47
  • I'd be curious to see your uptime (type that command into a bash prompt and see what it says. Is it possible that your system rebooted around that time? System Update or some such? – Trane Francks Sep 30 '14 at 11:50
  • Sorry, not sure to know how to get my uptime, do I type it into the Terminal window? – Popmoi Sep 30 '14 at 11:59
  • Yep. That's how you'd do it. :) – Trane Francks Sep 30 '14 at 12:01
  • 4
    Thank you so much for your help, I REALLY appreciate it, and so happy that I did not have time to start accusing anyone of hacking into my computer! ps. I saw that you're based in Tokyo, I worked there for some months back in 1989. Crazy but great city! – Popmoi Sep 30 '14 at 13:48

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .