Who's Connected to My Wi-Fi? Signs, Checking, and Protecting Yourself from Rogue Devices

Have you ever noticed your internet suddenly slowing down, even though your plan hasn't changed? Or has your router started overheating for no apparent reason? Perhaps unauthorized devices—neighbors, passersby, or even hackers—have connected to your Wi-Fi network and are using your traffic for their own purposes. According to Kaspersky LabMore than 30% of home networks in Russia have vulnerabilities that allow attackers to access Wi-Fi without the owner's knowledge.

In this article we will look at 7 key signs, which can indicate that there are "uninvited guests" in your network, as well as 4 reliable ways to check connected devices—from manually viewing the list in the router's admin panel to using specialized applications. You'll also learn how Block other people's gadgets in 3 clicks and configure the router so that reconnection is impossible. These instructions apply to all popular models: TP-Link, ASUS, Keenetic, MikroTik and others.

1. Signs of an unauthorized Wi-Fi connection

Before rushing to check your router settings, pay attention to indirect signals. They often appear long before you notice the foreign device in the list of connected clients.

• 🐢 A sharp drop in internet speed — This is especially noticeable in the evenings, when neighbors are actively using the network. For example, instead of the usual 100 Mbps, you get 10–20 Mbps, even though the provider hasn't done any maintenance.
• 🔥 The router is overheating or rebooting frequently. - increased load on the processor due to extra devices can lead to automatic reboot (especially relevant for budget models like TP-Link TL-WR840N).
• 📱 Unknown devices on the network - if your smartphone or laptop suddenly starts showing an unfamiliar name in the list of available networks (for example, DIR-300-5G-GUEST), it could be a "clone" of your Wi-Fi created by a hacker.
• 💰 Unexplained increase in traffic — Check your ISP account: if you've downloaded 500 GB in a month instead of the usual 200 GB, someone is clearly using your channel for torrents or streaming.

One of the most insidious signs is the appearance of advertising on all devicesIf you suddenly started seeing banners on sites where they weren't there before (for example, in Wikipedia or Government Services), this could mean that an attacker is redirecting your traffic through a proxy server with embedded ads. In rare cases, this is how viruses spread.

⚠️ Attention: Some modern viruses (eg, Wi-Fi Pumpkin) can spoof DNS servers on your router, redirecting you to phishing websites. If your browser automatically opens strange pages after connecting to Wi-Fi, immediately disconnect from the network and reset your router.

2. How to check connected devices via the router's admin panel

The most reliable way to identify "unnecessary" devices is to access your router's web interface. You don't need any special software; any browser will do. Here are the general instructions for most models:

1. Find out Router IP address. Usually it is 192.168.0.1, 192.168.1.1 or 192.168.8.1The exact address can be found on the sticker on the back of the device.
2. Enter the address in your browser's address bar. A login window will appear.
3. Enter your login and password (by default it is often admin/admin or admin/password). If you changed them, use your data.
4. Go to the section with a list of connected devices. Its name depends on the model:
   • 📋 TP-Link: DHCP → DHCP Clients List or Wireless → Wireless Statistics
   • 🖥️ ASUS: Network map or Local Network → DHCP Client List
   • 🌐 Keenetic: Devices (in the main menu)
   • 🔧 MikroTik: IP → DHCP Server → Leases

The list displays all devices currently or recently connected to your network. Note the columns:

If there are any suspicious devices on the list, write them down. MAC addresses — you'll need them for blocking. Don't rush to turn them off right away: sometimes these could be guests' gadgets (for example, a friend's smartphone who connected to yours yesterday) or smart devices (lamps, cameras) that you forgot.

Take a photo of the data (MAC, IP, name) | Check if this is your device (ask your household) | Try temporarily disabling it through the admin panel | Change the Wi-Fi password after blocking -->

3. Checking via mobile apps (without access to the router)

Not all routers allow you to easily find a list of connected devices, and some providers (for example, Rostelecom or Beeline) block access to the admin panel. In such cases, specialized applications can help. They scan the local network and display all active devices.

Here are 3 proven tools:

• 📱 Fing (Android/iOS) — the most popular network analysis app. It displays IP, MAC address, device manufacturer (by MAC address), and even open ports. The free version limits the number of scans.
• 🔍 NetScan (Android) — a simple scanner with the ability to save device history. Suitable for regular scanning.
• 🖥️ Advanced IP Scanner (Windows) — a PC utility that scans the network and displays detailed information about each device, including its MAC address and the host name.

How to use such programs:

1. Connect to your Wi-Fi network.
2. Run the scan (in Fing this is a button Refresh at the bottom of the screen).
3. Compare the list with your devices. Please note:
   • 📵 Devices with names like Unknown, Generic or a random set of numbers.
   • 🌍 Manufacturer by MAC address (for example, if you don’t have any devices Xiaomi, but there is one on the list Xiaomi_12:34:56).
   • ⚡ Devices with open ports (in Fing they are marked in yellow or red).

Apps don't always show All Devices – some devices may be hidden or use a static IP address. Therefore, to be completely sure, it's best to combine this method with checking through the router's admin panel.

⚠️ Attention: Some applications (eg. WiFi Map) offer a "network security check," but in reality they're collecting data about your router for their own database. Avoid programs with suspicious permissions (access to SMS, contacts, etc.).

4. How to block someone else's device: step-by-step instructions

If you find a foreign device on your network, you should disconnect it immediately. Here's a universal procedure for most routers:

What should I do if I can't block my device through the admin panel?

If your router doesn't support MAC or IP blocking, the only reliable way is to change your Wi-Fi password and the network name (SSID). After this, all devices will be disconnected, and you'll have to reconnect them. This method is also useful if a hacker has already changed your router settings (for example, by disabling access to the admin panel).

Try it first temporary shutdown:

1. In the router's admin panel, find the section with connected devices (see section 2).
2. Find someone else's gadget in the list and click Block, Disconnect or Power button (depending on the model).
3. Refresh the page and check if the device has disappeared from the list.

If temporary disconnection does not help (the device reconnects), use permanent blocking by MAC address:

1. Go to the section MAC Filtering (or MAC address filtering).
2. Add MAC address someone else's device to the blacklist (Blacklist).
3. Save the settings and reboot the router.

For routers Keenetic And ASUS with firmware Asuswrt-Merlin function available Intrusion Prevention (Intrusion protection). Enable it in the section Administration → System - this automatically blocks suspicious connections.

5. How to Protect Your Wi-Fi from Re-Hacks: 5 Essential Steps

Simply blocking someone else's device isn't enough—you need to close the loopholes the attacker exploited. Here's a minimum set of steps to protect your network:

• 🔑 Change your Wi-Fi password complex (at least 12 characters, with numbers, letters, and special characters). Avoid obvious combinations like 12345678 or qwertyAn example of a strong password: k8#pL9!vN2@xY5.
• 🛡️ Enable WPA3 encryption (or WPA2 if WPA3 is not supported). Do not use the outdated one under any circumstances. WEP - it gets hacked in a few minutes.
• 📛 Disable WPS This feature is often used for quick connections, but it has critical vulnerabilities. Find the option WPS in the settings and deactivate it.
• 👤 Change your admin panel login and passwordMany people leave the standard ones. admin/admin, which allows hackers to easily access the router's settings.
• 🔄 Update your router firmwareManufacturers regularly release patches for vulnerabilities. Check the latest version in the section System Tools → Firmware Upgrade.

Additional measures for advanced users:

• 🌐 Set up a guest network for friends and smart devices. It's isolated from the main network and doesn't provide access to local resources (printers, NAS).
• 🕒 Enable time limit (for example, in TP-Link This Parental Controls). This way, you can automatically turn off the Internet at night when no one is using it.
• 📡 Hide SSID (network name) - this won't protect against experienced hackers, but it will reduce the number of accidental connections. The option is called Hide SSID or Hide network.

⚠️ Attention: Some providers (eg MTS or Megaphone) block the ability to change the settings of a rental router. In this case, request an unblocking from support or purchase your own router.

6. What to do if a hacker has already changed your router settings

If you're trying to access the admin panel but see an unfamiliar interface, can't log in, or notice strange settings (such as a changed DNS), your router has likely been hacked. Here's what to do. immediately:

1. Disconnect your router from the Internet - remove the provider's cable from the port WAN (or Internet). This will prevent data leakage.
2. Reset to factory settings:
   • Press and hold the button Reset (usually it is recessed into the body and requires a paper clip) within 10-15 seconds.
   • Wait for the router to reboot (the indicators should light up in standard mode).
4. Reconfigure your router:
   • Connect to it via cable (not Wi-Fi!).
   • Set a new password for the admin panel and Wi-Fi.
   • Update your firmware to the latest version.

Check your computers and smartphones for viruses — If a hacker gained access to your router, they could infect your devices as well. Use Kaspersky Virus Removal Tool or Dr.Web CureIt!.

If after a reset the router still behaves strangely (for example, it changes settings on its own), this may mean:

• 🦠 The router firmware is infected with malware. (For example, VPNFilter). In this case, only a firmware update from the manufacturer's official website will help.
• 🔌 The device is physically damaged (For example, after a power surge). Try connecting to a different router. If problems persist, the problem lies with your ISP or your local network.

7. How to find out who is connected to your Wi-Fi: identifying the device owner

If you find someone else's device online, you can try to find out who it belongs to. While it's impossible to pinpoint the person, it's sometimes possible to narrow down the list of suspects.

Here's what you can do:

• 📱 View device name — it often contains clues. For example:
  • iPhone-Mashi - clearly belongs to someone named Masha.
  • Xiaomi_Redmi9 — a budget smartphone most likely belongs to a neighbor.
  • ESP_123456 - a smart device (lamp, socket) from a neighbor.
• 🌍 Check MAC address against manufacturer database. The first 6 characters of the MAC (eg. B4:75:0E) indicate the brand. You can check it on sites like MAC Vendors or Wireshark OUI Lookup. For example, 3C:5A:B4 - This Google (maybe connected Chromecast or Nest neighbor).
• 🕵️ Track device activityIf it downloads large files at night, it's probably a torrent client. If it's only active during the day, it's most likely a smartphone or tablet.

If you suspect a specific person (like a neighbor), you can politely ask if they've been connected to your network. But be careful: making a direct accusation without evidence can lead to conflict. It's best to first block the device And strengthen protection, as described in section 5.

As a last resort, you can file a complaint with your provider if the connection is malicious (for example, someone is regularly hacking your Wi-Fi to spread viruses). To do this, you will need:

• Router logs (if enabled).
• Screenshots with MAC addresses and connection time.
• A free-form statement describing the problem.

⚠️ Attention: "Punishment" of a hacker (for example, by attacking their device) is illegal (Article 272 of the Russian Criminal Code - "Unauthorized access to computer information"). The most you can legally do is block them from your network and strengthen your security.

FAQ: Frequently Asked Questions about Wi-Fi Security

Is it possible to find out what websites someone else's device is visiting on my network?

Technically yes, but you need to set it up for that traffic monitoring on the router or use specialized programs like WiresharkHowever, this violates the law on personal data (Federal Law 152), if you haven't warned the user. It's better to simply block the device.

Why does the router show unknown devices even though I haven't given anyone the password?

There are several reasons:

• 📡 Smart devices (lamps, cameras, vacuum cleaners) are connected automatically and may appear under strange names.
• 🔄 WPS function allows you to connect without a password (disable it!).
• 🦠 Malicious software on your computer or smartphone can "share" access to the network.
• 🔌 Neighbors with the same network name - if you have a standard SSID like TP-Link_1234, their devices may accidentally connect to yours.

How can I protect my Wi-Fi from hacking if I have an old router without WPA3?

If your router does not support modern encryption standards, do the following:

1. Turn on WPA2-PSK (AES) - This is the safest option available.
2. Turn it off WPS And UPnP (universal plug-and-play).
3. Install MAC address filtering (allow only your devices to connect).
4. Set up guest network for smart devices and guests.
5. Consider purchasing a new router - even budget models (for example, TP-Link Archer C50 (for 2-3 thousand rubles) support WPA3.

Can a hacker connect to my Wi-Fi if I hide the SSID?

Hiding the network name (Hide SSID) does not protect from experienced hackers. Any network scanner (for example, Kismet or Airodump-ng) will reveal hidden access points. This feature only makes it more difficult for random users to connect. For real protection, use strong password And WPA3 encryption.

What should I do if my neighbor refuses to disconnect from my Wi-Fi?

Here is the algorithm of actions:

1. Change your Wi-Fi password and enable MAC address filtering.
2. If your neighbor continues to connect, write a formal complaint to your ISP, including the MAC address of their device.
3. As a last resort, you can file a police report under Article 272 of the Russian Criminal Code ("Unauthorized access to computer information"), but this will require evidence (router logs, screenshots).

Remember: independent attempts to "punish" a neighbor (for example, attacks on his devices) are crime.