Slow internet speeds and constant lag in online games are often the first signs that your wireless network is being used by strangers. In densely populated areas and with a complex password, the likelihood of brute-force attacks seems low, but neighbors could very well have copied your password while you were entering it on their device. This is why quickly identifying the number of Wi-Fi connections is a basic skill for any home network administrator.
There are several proven methods for monitoring local network activity, each with its own features and level of detail. You can use your router's standard web interface, install a specialized app on your smartphone, or use the operating system's built-in port scanning utilities. The choice of a specific method depends on how deeply you plan to analyze traffic and whether you have access to the router's administrative panel right now.
In this article, we'll explore all available diagnostic options, from simple visual indicators to professional packet sniffers. We'll cover how to distinguish legitimate devices from rogue ones, which router models offer the most convenient monitoring tools, and what to do if an intruder is detected. Connection control — this is the first step to ensuring the security of your personal data.
Using the router's web interface
The most reliable and informative way to find out who is connected to your network is to log into your router's control panel. This method provides comprehensive information about each device, including the MAC address, IP address, connection type (wired or wireless), and activity time. To get started, you'll need to know the default gateway address, which is most often 192.168.0.1 or 192.168.1.1.
After entering the address in the browser, the system will request authorization. If you have never changed the factory data, the username and password are often default, for example, admin/adminHowever, in modern models from Keenetic or MikroTik Security has been enhanced, and access can be protected with a unique password set during initial setup. Login attempts with incorrect credentials will be blocked after several unsuccessful attempts.
⚠️ Note: The interface and tab names may vary significantly depending on the firmware version and the hardware manufacturer. If you can't find the section you need, please refer to the official documentation for your router model on the manufacturer's website.
Within the interface, look for sections with names like "Client List," "Status," "Network Map," or "DHCP Server List." This is where you'll see a complete picture of what's happening on the air. Some advanced systems, such as Asuswrt or TP-Link Tether, even display a real-time traffic consumption graph for each client, allowing you to instantly identify "heavyweights."
Below is a table with sample customer list paths for popular brands:
| Router brand | Path to the menu | Display Features |
|---|---|---|
| TP-Link | Wireless -> Wireless Statistics | Shows only Wi-Fi clients |
| ASUS | Network Map -> Clients | Graphical display of speed |
| D-Link | Status -> DHCP Clients | Basic MAC and IP list |
| Keenetic | Client list (main) | Detailed information about the device |
| Xiaomi | Wi-Fi Settings -> Manage Devices | Simplified mobile interface |
⚠️ Note: DHCP server settings may be changed in such a way that leases are not immediately released after a device is disconnected. Therefore, the list may display devices that are physically out of range but have not yet released their IP address.
The advantage of this method is the ability to not only detect but also immediately block the intruder. Most routers have a "Blacklist" or "Deny Access" feature that operates at the MAC filtering level. This ensures that even with knowledge of the password, an intruder will be unable to access network resources.
Mobile applications for network monitoring
For users who find it inconvenient to open a browser and enter IP addresses every time, developers have created a variety of convenient mobile utilities. These apps scan the local network and display a list of all active devices in a clear graphical format. One of the leaders in this niche is Fing, which is available for both Android and iOS.
The principle behind these programs is simple: they send ARP requests to all possible subnet cells and analyze the responses. On your smartphone's screen, you'll see device icons, their manufacturers, and network names. This allows you to quickly identify, for example, an "Apple iPhone 13" or a "Samsung Smart TV" without delving into the technical details of MAC address codes.
- 📱 Fing — the most popular application with the function of determining the device type and connection history.
- 🔍 Network Analyzer — a powerful tool for professionals, including ping, traceroute and port scanner.
- 🛡️ WiFi Guard — specializes in real-time notifications of new connections.
It's important to understand that mobile apps operate within the operating system's permissions. On iOS, for example, scanning may be limited due to Apple's security policies, while Android often offers more extensive functionality. Furthermore, for the app to function correctly, your smartphone and router must be on the same subnet.
Some apps offer paid subscriptions that unlock speed tests and more in-depth vulnerability analysis. However, for the basic task of finding out the number of Wi-Fi connections, the free versions are quite sufficient. They allow you to quickly answer the question: "Who's using my Wi-Fi?"
Diagnostics via the Windows command line
If you don't have a smartphone handy and don't want to mess around with your router settings, you can use the built-in tools of the Windows operating system. The command line provides access to the ARP (Address Resolution Protocol) table, which stores the mappings between IP addresses and physical MAC addresses of devices with which your computer has recently communicated.
To launch the utility, press the key combination Win + R, enter cmd and press Enter. In the black window that opens, enter the command arp -aThe system will display a list of all known addresses on the local network. However, there's a catch: the ARP table is only populated after active packet exchange.
arp -aTo obtain a more complete list, it is recommended to first "wake up" the network. To do this, you can ping the broadcast address or simply wait for Windows background services (updates, time synchronization) to contact other nodes. Without this step, the list may be empty or incomplete.
An alternative method for advanced users is to use PowerShell. Commands like Get-NetNeighbor can provide a more structured output, but require administrator rights. This method is good for a quick check, but lacks the detail of the web interface.
What to do if arp -a shows nothing?
If the command returns an empty result, it means your computer hasn't yet exchanged data with other devices on the network. Try pinging the gateway first (using the ping 192.168.1.1 command) or opening any website in your browser to activate network traffic. Then, repeat the arp -a command.
Analysis of indicators on the router body
The most basic, but sometimes useful, way to indirectly assess network load is to monitor the LED indicators on the device's body. The LED labeled "Wi-Fi," "WLAN," or with an antenna symbol typically blinks when data is being transmitted. The frequency and intensity of the blinking correlate with the volume of traffic.
If you've turned off all your devices, closed your laptops, and are sure no one in your household is downloading files, but your Wi-Fi indicator continues to flash wildly, this is a sure sign of unauthorized activity. A constant high load without any visible users could indicate not only a "neighbor," but also background update processes or, in the worst case, a botnet operating within your network.
However, you shouldn't rely solely on visual inspection. The lights won't show you the number of connections, their MAC addresses, or device names. They're merely an alarm signal, prompting you to conduct a more in-depth diagnosis using the methods described above. Modern routers with color displays, such as some models, Asus or Zyxel, can display the number of clients directly on the screen.
How to distinguish your devices from others
Once you've received a list of connected clients, the most difficult stage begins: identification. The list may include devices with names like "Unknown," "Android-xyz," or simply a string of numbers. To avoid accidentally blocking your own refrigerator or smart light bulb, it's necessary to conduct an audit.
The first step is to check the MAC addresses. Each network interface has a unique identifier, which can be found in the device's settings. On Windows, this is done using the command ipconfig /allOn Android, go to "About Phone" -> "General Information." Write down the primary addresses and compare them with the list in your router.
- 🏷️ RenamingGo to the settings for each of your gadgets and give them descriptive names (e.g., "TV-LivingRoom," "Phone-Mom"). This will make monitoring easier in the future.
- 📝 Journaling: Make a table or list in a notebook where the device and its owner are indicated next to the MAC address.
- 🔎 Search by OUIThe first three bytes of a MAC address indicate the manufacturer. There are OUI databases online that can be used to determine whether a device was manufactured by a specific company. Sony or Huawei.
Often, devices you forgot existed will show up on the list: old game consoles, smart plugs, or game consoles in standby mode. Before panicking, try turning off the devices one by one and see if the client disappears from the list. This is the most reliable verification method.
Protective measures after violations are detected
If you spot a stranger in your list of devices, you need to act immediately. The easiest and most effective way is to change your Wi-Fi password. After changing the security key, all devices will be disconnected, and you'll need to enter the new password to reconnect. This is guaranteed to kick the intruder out of the network.
In addition to changing the password, it's recommended to enable MAC address filtering. You can create a "whitelist" in your router settings that only includes your devices. All other devices, even those with the password, will be blocked from connecting. However, this method has a downside: every time you purchase a new device, you'll have to manually add its address to the whitelist.
⚠️ Note: MAC address filtering is not absolute protection, as a skilled hacker can spoof (clone) the MAC address of a trusted device. Use this method in conjunction with a strong password and WPA2/WPA3 encryption.
It's also worth checking if WPS is enabled. This protocol simplifies connection, but has known vulnerabilities that make it easy to brute-force the PIN code and gain access to the network. In modern routers, such as Keenetic or MikroTik, it is recommended to completely disable WPS in the wireless network settings.
☑️ Action Plan for Wi-Fi Hacking
Remember that security is a process, not a one-time action. Regularly checking your client list, at least once a month, will help you stay on top of things and enjoy high-speed, uninterrupted internet.
Frequently Asked Questions (FAQ)
Can my neighbor see my files if he is connected to Wi-Fi?
By default, if you have network discovery and file sharing enabled, this is theoretically possible. However, modern operating systems mark a new network as "Public" when connecting to it, blocking your PC from being seen by others. However, the risk of data leakage still exists, so blocking the intruder is essential.
Why are there more devices in the router list than I counted?
The list often includes virtual interfaces (such as a guest network), bridges, and smart home devices (light bulbs, sensors) that you may have forgotten. The router may also store "ghost" devices—devices that were previously connected but are now offline. Check the "Active" status or the last connection time.
How can I find out which of my neighbors is stealing my Wi-Fi?
Technically, you can only see the MAC address and the device name (if it's being transmitted). It's impossible to find out the exact apartment address or the owner's last name through the router. This would require physical intrusion or access to the provider's equipment, which is illegal. Your task is simply to block access.
Will the internet speed decrease if another person connects?
Yes, the channel is shared between all active users. If a neighbor starts a torrent or watches 4K video, your speed may drop dramatically, and your gaming ping will increase. The wireless interface operates in half-duplex mode, so each additional device increases the number of collisions and reduces overall throughput.