2 deleted 114 characters in body; edited tags; edited title
source | link

Wrong user or IP in High Sierra > Terminalterminal

When reinstalling MacOS High Sierra, setting root user password I have noticed strange line dsl-201-101-1-179-sta: before my admin username user$.

I Googled and found references to WannaCry ransomware, for instance this. Other references showed IP with Mexican DSL provider dsl-201-100-226-146-sta.prod-empresarial.com.mx. An example reference to security site: https://www.vmray.com/analyses/wannacry-ransomware/report/user-sequential-behavior.html

I am really not sure how it came to be but it does not matter how many times I reinstall my Mac after. After a while this comes up in my terminal. I hadhave never used windowsWindows on this computer and it was wiped securely thruthrough disk utility before fresh install many times.

Last login: Sat Mar 10 13:13:20 on ttys000
dsl-201-101-1-179-sta:~ user$ lsof -i | grep LISTEN

rapportd   258 user    3u  IPv4 0x6ee1327a4ca5e447      0t0  TCP *:49169 (LISTEN)

rapportd   258 user    4u  IPv6 0x6ee1327a4cb40e3f      0t0  TCP *:49169 (LISTEN)

Wrong user or IP in High Sierra > Terminal

When reinstalling MacOS High Sierra, setting root user password I have noticed strange line dsl-201-101-1-179-sta: before my admin username user$

I Googled and found references to WannaCry ransomware. Other references showed IP with Mexican DSL provider dsl-201-100-226-146-sta.prod-empresarial.com.mx. An example reference to security site: https://www.vmray.com/analyses/wannacry-ransomware/report/user-sequential-behavior.html

I am really not sure how it came to be but it does not matter how many times I reinstall my Mac after a while this comes up in my terminal. I had never used windows on this computer and it was wiped securely thru disk utility before fresh install many times.

Last login: Sat Mar 10 13:13:20 on ttys000
dsl-201-101-1-179-sta:~ user$ lsof -i | grep LISTEN

rapportd   258 user    3u  IPv4 0x6ee1327a4ca5e447      0t0  TCP *:49169 (LISTEN)

rapportd   258 user    4u  IPv6 0x6ee1327a4cb40e3f      0t0  TCP *:49169 (LISTEN)

Wrong user or IP in High Sierra terminal

When reinstalling MacOS High Sierra, setting root user password I have noticed strange line dsl-201-101-1-179-sta: before my admin username user$.

I Googled and found references to WannaCry ransomware, for instance this. Other references showed IP with Mexican DSL provider dsl-201-100-226-146-sta.prod-empresarial.com.mx.

I am really not sure how it came to be but it does not matter how many times I reinstall my Mac. After a while this comes up in my terminal. I have never used Windows on this computer and it was wiped securely through disk utility before fresh install many times.

Last login: Sat Mar 10 13:13:20 on ttys000
dsl-201-101-1-179-sta:~ user$ lsof -i | grep LISTEN

rapportd   258 user    3u  IPv4 0x6ee1327a4ca5e447      0t0  TCP *:49169 (LISTEN)

rapportd   258 user    4u  IPv6 0x6ee1327a4cb40e3f      0t0  TCP *:49169 (LISTEN)
    Post Migrated Here from stackoverflow.com
1
source | link

Wrong user or IP in High Sierra > Terminal

When reinstalling MacOS High Sierra, setting root user password I have noticed strange line dsl-201-101-1-179-sta: before my admin username user$

I Googled and found references to WannaCry ransomware. Other references showed IP with Mexican DSL provider dsl-201-100-226-146-sta.prod-empresarial.com.mx. An example reference to security site: https://www.vmray.com/analyses/wannacry-ransomware/report/user-sequential-behavior.html

I am really not sure how it came to be but it does not matter how many times I reinstall my Mac after a while this comes up in my terminal. I had never used windows on this computer and it was wiped securely thru disk utility before fresh install many times.

Last login: Sat Mar 10 13:13:20 on ttys000
dsl-201-101-1-179-sta:~ user$ lsof -i | grep LISTEN

rapportd   258 user    3u  IPv4 0x6ee1327a4ca5e447      0t0  TCP *:49169 (LISTEN)

rapportd   258 user    4u  IPv6 0x6ee1327a4cb40e3f      0t0  TCP *:49169 (LISTEN)