Enumerate Users with “finger”

finger $USER@$IP_ADDRESS

This obviously requires finger to be running and a list of users to try.