cancel
Showing results forĀ 
Search instead forĀ 
Did you mean:Ā 
cancel
989
Views
0
Helpful
1
Replies

root user logged on SSH connections

twhittle1
Level 1
Level 1

Hello,

I have a quick question, can anyone help?

I currently have my little 877 router as my home router and I ssh back in often for various reasons.

I was exploring show commands earlier and I noticed that the show users command lists myself logged in but also another user called root:

router#show users
    Line       User       Host(s)              Idle       Location
   2 vty 0     root       idle                 00:00:17 x.x.x.x
   3 vty 1     root       idle                 00:00:15 x.x.x.x
   4 vty 2     root       idle                 00:00:56 x.x.x.x
*  5 vty 3     tom        idle                 00:00:00 y.y.y.y
   6 vty 4     root       idle                 00:00:13 x.x.x.x

Now I don't actually have a root user configured in the running config, so I'm assuming this is some kind of internal process that just runs.

It just seems a little strange to me so I wanted to check. The thing that makes me suspicious is the location listed (blocked out in this message) is correct for me but for the root user is another public IP address. This seems very strange...

Is this normal? Or is this potentially a malicious intruder (I can't believe it would be?)

Many Thanks!

Tom

1 Reply 1

Carlos de Armas
Level 1
Level 1

i think it might be the old sessions that remain there without time out configured.