Written 28 Aug 2026. This is a how-to, not a product card. Buy links are not tagged yet.

See who is on the leftover box right now

Before you buy a camera or a monitoring box, ask who is logged into the leftover box right now with who.

You already peeked at recent logins with see who logged into the leftover box recently. That is history. This note is the live room: who has a session open this second. You are reading a short list the leftover box already knows. You are not buying a camera, a SIEM, or a monitoring appliance for this look.

Skip until SSH works

If you have never logged in from the couch, that is SSH from the couch. Prefer a password you chose first: change the leftover-box login password. This note assumes you can log in from the couch. It is a quiet look, not day-one homework.

What this is

A live peek, not a shopping trip. who prints who is logged in right now (your SSH session will show up; that is normal). History is a different tool: see who logged into the leftover box recently. Failed password guesses are a different peek: see if anyone guessed the leftover-box password. Guess-slowing later is slow down password guesses on SSH.

Ask who is on right now

SSH in from the couch, then ask:

who

You should see one line for your session, often with a house address or hostname and a time. Only your line is fine. An empty print is rare while you are connected; if you see a stranger name or an address you do not recognize, stop and fix the login path below. Do not buy anything because the list printed once.

Optional: a little more detail

If you want a one-line load hint plus who is on:

w

Keep this note on the short list. You do not need a fancy dashboard for two lines. When the leftover box feels slow later, that is a different check: see which program is using the leftover box CPU.

If a line looks wrong

Stop. Change the leftover-box password again: change the leftover-box login password. Prefer a key, then turn password login off when the key is boring: log in with a key, not the password every time, then turn off leftover-box password login once the key works. Keep SSH on the house network only: keep the leftover box on the house network. Do not forward port 22. Do not buy a camera for one odd line until you understand the list.

What next

Leave it. Once in a while is enough for this peek after the login habit is boring. History when you want the diary is see who logged into the leftover box recently. The firewall path is turn on a simple firewall without locking yourself out. Guess-slowing later is slow down password guesses on SSH. The leftover-first rule stays start with what you already have.

Skip

• Skip if SSH from the couch is not working yet. That is SSH from the couch.
• Skip a camera, a SIEM, or a monitoring box for this look.
• Skip opening port 22 on the router. SSH stays on the house network.
• Skip treating your own current SSH line as an attack.
• Skip a NAS for this look.