2

I'm trying to find out if someone has hacked my computer. In case I get the following message in my Terminal window: "Last login: Tue Sep 30 02:02:18 on console" does that mean a person has logged in, or could it be an automatic programme running?

1
  • If your computer were hacked, you would probably have seen an ip address instead of console. I don't know what console means though, mine shows TTY## instead
    – LaX
    Sep 30, 2014 at 11:03

1 Answer 1

2

Popmoi, the last login on console is exactly that: Somebody (likely you) logged into a bash session on your computer at 2:02:18 on Sep 30. Generally, 'console' is shown for the first shell login and then ttys000 would be the next. I see this every login/reboot for my Terminal group, which opens two bash sessions in different tabs.

16
  • Thanks for your replies! I was asleep at 2:02:18. That said, I also checked my Console, but had no 'LidOpen' reported for that time. I have five ttys000 messages from around 13h today. My computer is a Macbook. I really want to find out if someone hacked my computer, but also need to be 100% sure.
    – Popmoi
    Sep 30, 2014 at 11:47
  • I'd be curious to see your uptime (type that command into a bash prompt and see what it says. Is it possible that your system rebooted around that time? System Update or some such? Sep 30, 2014 at 11:50
  • Sorry, not sure to know how to get my uptime, do I type it into the Terminal window?
    – Popmoi
    Sep 30, 2014 at 11:59
  • 1
    And there's your answer: Software update complete 30/09/14 02:01:36,760 reboot --- Good job! Sep 30, 2014 at 13:37
  • 5
    Thank you so much for your help, I REALLY appreciate it, and so happy that I did not have time to start accusing anyone of hacking into my computer! ps. I saw that you're based in Tokyo, I worked there for some months back in 1989. Crazy but great city!
    – Popmoi
    Sep 30, 2014 at 13:48

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .