Home / server / Questions / 334337
Accepted
wrongusername
Asked: 2011-11-24 20:19:52 +0800 CST

How can I view the usernames of those SSHing into my network?

  • 772

I can see the IP address of the connecting computer. I am just curious as to whether I can get the username of the computer that is connecting into the network?

ssh users user-accounts

3 Answers

  1. Best Answer

    Do you mean you want to get the hostname?

    If so, for the public IP, use: nslookup, host, dig, ...

    $ nslookup 64.34.119.12
Server:     8.8.8.8
Address:    8.8.8.8#53

Non-authoritative answer:
12.119.34.64.in-addr.arpa   name = stackoverflow.com.

Authoritative answers can be found from:

    For the private IP, use: nbtscan, nmblookup, ...

    $ nbtscan 192.168.15.32
Doing NBT name scan for addresses from 192.168.15.32

IP address       NetBIOS Name     Server    User             MAC address      
------------------------------------------------------------------------------
192.168.15.32    VC-307           <server>  <unknown>        f4-6d-04-cd-0c-8e
    • 3

  2. As stated earlier, you can get the systems involved, but not the specific usernames involved just by a network scan. If you collected information from all the systems' syslogs (via a central logger) you could get the information of the usernames on the destination machines but NOT the username on the source machine.

    • 1

  3. Like it's been stated before; unless the connecting systems are under your jurisdiction, you can't.

    • 0