Linux wrote:
# ps ax PID TTY STAT TIME COMMAND
<snip> 2994 ? Ss 0:00 sshd: root@pts/2 <snip> 4028 pts/2 Ss+ 0:00 -bash <snip> 5603 ? Ss 0:00 sshd: root@pts/0 5625 pts/0 Ss 0:00 -bash
Two root logins via ssh - are these both you? The first looks early in the boot process.
I'm sure I don't need to say you shouldn't really be logging in directly as root. Better to disable root logins by ssh - login as a regular user and su to root.