When reinstalling MacOS High Sierra, setting root user password I have noticed strange line
dsl-201-101-1-179-sta: before my admin username
I Googled and found references to WannaCry ransomware. Other references showed IP with Mexican DSL provider
dsl-201-100-226-146-sta.prod-empresarial.com.mx. An example reference to security site: https://www.vmray.com/analyses/wannacry-ransomware/report/user-sequential-behavior.html
I am really not sure how it came to be but it does not matter how many times I reinstall my Mac after a while this comes up in my terminal. I had never used windows on this computer and it was wiped securely thru disk utility before fresh install many times.
Last login: Sat Mar 10 13:13:20 on ttys000 dsl-201-101-1-179-sta:~ user$ lsof -i | grep LISTEN rapportd 258 user 3u IPv4 0x6ee1327a4ca5e447 0t0 TCP *:49169 (LISTEN) rapportd 258 user 4u IPv6 0x6ee1327a4cb40e3f 0t0 TCP *:49169 (LISTEN)