Have you ever wondered who connected to your Wi-Fi while you were away? Or wanted to check if your neighbor was leaking your internet? A router's connection history isn't just a list of devices, but also an activity log that helps identify traffic leaks, unauthorized access, or even viruses on connected devices. However, not all routers store this information equally: some allow you to access the data in just a few clicks, while others require you to extract it through the command line.
In this article we will look at All possible ways to view your Wi-Fi router's history — from standard admin panel menus to hidden firmware features. You'll learn how to check connected devices in real time, where to look for visitor logs, and why some models (for example, budget ones) Tenda or Mercusys) may not save history at all. Also, how to protect your network from outsiders if you detect suspicious activity.
Let us warn you right away: Not all routers keep detailed logs.Most often, the device's memory stores only:
- 🔹 List of connected devices (MAC addresses, IP, host names)
- 🔹 Last connection time (not always accurate)
- 🔹 Volume of consumed traffic (only in advanced models)
- 🔹 System Event Log (reboots, changes in settings)
If you need a complete history of visited websites or detailed traffic for each device, a router won't help here - you'll need specialized software (for example, Wireshark) or setting up a proxy server. But for most everyday tasks, the built-in tools are sufficient.
1. How to view currently connected devices (real-time list)
The easiest way is to check who Now uses your Wi-Fi. This feature is available in almost all routers, regardless of price and brand. The instructions are universal for TP-Link, ASUS, Keenetic, Zyxel and other popular brands.
To begin with connect to the router via cable or Wi-Fi. Then:
- Open your browser and type in the address bar
192.168.0.1or192.168.1.1(the exact address is indicated on the router sticker). - Enter your login and password (by default it is often
admin/adminoradmin/empty). - Find the section with connected devices. Its name depends on the model:
- 📌 TP-Link:
General Settings → Wireless → Wireless StatisticsorDHCP → DHCP Client List - 📌 ASUS:
Network Map → ClientsorLocal Network → DHCP Server - 📌 Keenetic:
Devices → Device List - 📌 Zyxel:
Network → Local Network → DHCP Clients
- 📌 TP-Link:
In the list that opens you will see:
- 🖥️ Device name (if it transmits it, for example,
iPhone-12-Pro) - 🔢 MAC address (unique identifier, by which the manufacturer can be identified)
- 🌐 IP address (local, issued by the router)
- ⏱️ Connection time (sometimes with an indication of the session duration)
☑️ What to do if there is an unknown device in the list
Important! Some devices (such as smart bulbs or cameras) may appear with strange names like ESP_123456To identify them, temporarily unplug the suspicious device and refresh the list—if it disappears, it was your device.
⚠️ Attention: In budget routers (for example, Tenda N300 or D-Link DIR-300) the list of connected devices may reset after a reboot. If you need history, consider purchasing a model with support logging (event logging).
2. Where to find the connection history (router logs)
If you need to know, who connected to the router before (for example, yesterday or last week), you will have to search system event log (logs). Unfortunately, not all routers keep such records, and if they do, they don't store them for long—usually from a few hours to 7 days.
Here's where to look for logs in popular firmware:
| Router brand | Path to logs | What exactly is being recorded? | Shelf life |
|---|---|---|---|
| ASUS (Asuswrt firmware) | Administration → Journal |
Connections/disconnections, changing settings, errors | Up to 7 days |
| Keenetic | System → Logs → System Log |
DHCP distribution, authorization, blocking | Up to 30 days (depending on the model) |
| TP-Link (new models) | Advanced settings → System tools → Log |
Only critical events (not all connections) | Before reboot |
| Zyxel Keenetic | Monitoring → Logs → Connections |
MAC addresses, connection time, IP | Up to 14 days |
| MikroTik | Logs → System or IP → DHCP Server → Leases |
Complete DHCP history, including old IP leases | Configured manually |
If your router doesn't have a built-in logger, you can try alternative methods:
- 🔧 Connect an external syslog server (for advanced users). Some routers (for example, MikroTik or Ubiquiti) can send logs to a remote server.
- 📊 Use third-party software like WiFi Guard or Fing to scan the network and keep track of history manually.
- 🔄 Enable the DHCP Logging option (if available in the settings). For example, in Keenetic this is done in
Home Network → Segments → DHCP Settings.
3. How to export connection history for analysis
Let's say you've found a connection log, but it's not displayed in a convenient format—for example, as raw logs with no filtering options. In this case, the data can be export and analyze on a computer.
Export methods depend on the router model:
- 📄 ASUS And Keenetic: The logs section usually has an "Export" or "Save As" button. Logs will be saved in the following format:
.txtor.csv. - 🖥️ MikroTik: Use the command in the terminal:
/system logging export file=wifi_historyThe file will appear in the section
Files. - 🔗 TP-Link (old models): Logs can be copied manually from the web interface (select text → Ctrl+C).
After exporting, open the file in Excel or Google Sheets and filter the data by:
- 🕒 Date/time (to find suspicious night connections)
- 🔢 MAC addresses (to identify duplicate unknown devices)
- 📶 Connection type (Wi-Fi or Ethernet)
How to decipher a MAC address?
The first 6 characters of the MAC address (eg. B8:27:EB (for Raspberry Pi) indicate the device manufacturer. Check them using services like MAC Vendors Lookup (link is for example, do not click - it is an external resource).
If there is a lot of garbage in the logs (for example, duplicate entries about time updates), use keyword filter:
DHCP— issuing IP addressesassociateorauthenticate— Wi-Fi connectionsblockordeny- blocked access attempts
4. Advanced Methods: SSH, Telnet, and Third-Party Utilities
If the router's web interface does not provide the required information, you can try to obtain the data through command lineThis method is suitable for experienced users and requires:
- 🔌 Access by
SSHorTelnet(On some routers you need to first enable this option in the settings). - 💻 Basic knowledge of Linux commands (most routers run on the Linux kernel).
Examples of useful commands:
- 📡 View current Wi-Fi connections:
iw dev wlan0 station dump(Where
wlan0— wireless interface name, may differ) - 📊 View DHCP history (issued IP addresses):
cat /var/lib/misc/dnsmasq.leases - 🔍 View system logs:
logread | grep -i"dhcp\|assoc\|auth"
Attention! Not all routers support these commands. For example, on TP-Link with factory firmware access to logread is often blocked. In this case, installing custom firmware (for example, OpenWRT), but it is risky for beginners.
To automate data collection, you can set up script, which will save logs to a file every few hours. An example of a simple script for OpenWRT:
#!/bin/shLOG_FILE="/tmp/wifi_history.log"
echo"=== $(date) ===" >> $LOG_FILE
iwinfo wlan0 assoclist >> $LOG_FILE
cat /var/lib/misc/dnsmasq.leases >> $LOG_FILE
Save it as /root/wifi_logger.sh and add in cron:
0 /6 /root/wifi_logger.sh
⚠️ Attention: Some internet providers block SSH/Telnet access to the router out of the box. If you rent equipment (for example, from Rostelecom or Beeline), these methods may not work. In this case, contact your provider to unblock it or use the web interface.
5. How to check traffic history by device
If you are interested not only Who connected, but also how much traffic To determine how much power you consumed, you'll need additional tools. Most home routers don't keep detailed statistics by default, but you can enable them.
Here's how to do it on popular models:
- 📈 ASUS:
- Go to
Administration → System Settings. - Enable the option
Enable traffic logging. - Statistics will be available in
Network Map → Traffic.
- Go to
- 📊 Keenetic:
- Open
Statistics → Traffic. - Click "Configure" and add devices to monitor.
- Data will be collected from this moment on (history cannot be restored!).
- Open
- Go to
IP → Firewall → Traffic Monitor. - Set up rules for the required devices (by IP or MAC).
- 🖥️ GlassWire (Windows/macOS) - shows traffic by devices on the network.
- 📱 Fing (mobile app) - scans the network and displays activity.
- 🌐 OpenWRT + ntopng — advanced monitoring for custom firmware.
- 🔐 Change your Wi-Fi password:
- Use
WPA3(orWPA2-PSK, IfWPA3(not supported). - The password must be at least 12 characters long, including letters, numbers, and special characters.
- Do not use personal information (date of birth, pet's name).
- Use
- 🔄 Update your router firmware:
- Outdated firmware contains vulnerabilities that hackers exploit.
- Check for updates in the section
Administration → Software Update.
- 🚫 Enable MAC address filtering:
- In the section
Wireless Mode → MAC FilterAdd only your devices. - Cons: If you buy a new gadget, you will have to manually add its MAC.
- In the section
- 🌐 Disable WPS and remote administration:
- WPS is vulnerable to brute force attacks (even if you have a "secure" PIN).
- Remote access (via the Internet) is only needed for advanced settings.
- 🕵️ Set up a guest network:
- For guests, create a separate Wi-Fi with limited access to the local network.
- This will protect your main devices (computers, cameras) from hacking.
If your router is not able to collect statistics, use third-party programs:
If you need traffic history for the past days, but your router doesn't keep track of it, there's only one option left - analyze provider logsSome operators (eg. Beeline or MTS) provide statistics upon request to technical support. However, they will only show total traffic, and not distributed across devices.
6. How to protect your router from unauthorized access
If you find unknown devices in your connection history, it's time to take action. Here minimum set of actions to protect the network:
Additional measures for the paranoid 😉:
- 🔗 Change your router's IP address (for example, with
192.168.1.1on192.168.42.1). This will make it more difficult for hackers to automatically select the address. - ⏱️ Set up a Wi-Fi schedule (For example, turning off the network at night). This will reduce the window for attacks.
- 🛡️ Install a VPN on your router (if supported). This hides your traffic from your ISP and attackers.
How to check if your router is hacked?
If unknown port forwarding rules appear in the settings (Port Forwarding), DNS servers have been changed or enabled DMZ - These are signs of hacking. Immediately reset the router to factory settings (button Reset) and reconfigure it from scratch.
7. Common problems and their solutions
When trying to view your router's history, you may encounter some serious errors. Here are the most common ones and how to fix them:
| Problem | Possible cause | Solution |
|---|---|---|
| There is no section with logs in the admin panel | Budget router model or outdated firmware | Update your firmware or use third-party utilities (for example, Fing) |
| Logs are empty or reset after reboot | Setting up default log reset | Configure saving logs to an external server (if supported) |
| I can't connect to 192.168.1.1 | The router's IP address has changed or there is a network conflict. | Check IP via ipconfig (Windows) or ifconfig (Linux/macOS) |
| There are unknown MAC addresses in the device list. | Neighbors connected or devices with random MACs (iPhone, Android 10+) | Check addresses via MAC Vendors Lookup or disable unknown devices |
| The router slows down after enabling logging. | Weak processor, memory overload | Disable verbose logging or reduce the log retention period |
If nothing helps, try reset the router to factory settings:
- Press and hold the button
Reset(usually it is recessed into the body and requires a paper clip) 10-15 seconds. - After rebooting, log in to the admin panel using the default login/password (indicated on the sticker).
- Reset your Wi-Fi and check your history again.
⚠️ Attention: Router interfaces may vary depending on the firmware version. If you can't find the section you need, check the official instructions for your model on the manufacturer's website. Some providers (e.g., Rostelecom) block access to advanced settings in rented routers.
FAQ: Answers to Frequently Asked Questions
Is it possible to view the history of visited websites through a router?
In most home routers there is no such functionThe history of visited websites is stored only:
- 🖥️ On the device itself (in the browser or through parental controls).
- 🌐 On the provider's side (but they do not provide this data upon request).
- 🔍 Through specialized software (for example, OpenDNS or Pi-hole).
Exception: routers with support DNS logging (For example, Keenetic with the DNS Request Monitoring component).
How can I find out who's connected to my Wi-Fi if my router doesn't keep logs?
In this case, the following will help:
- Network scanning utilities like Fing or Advanced IP Scanner (will show current connections).
- Setting up notifications about new devices (for example, through WiFi Guard).
- Traffic analysis on the main computer (via Wireshark or GlassWire).
If you need history for the past days, but it is not there, the only thing left is change password and watch for new connections.
Is it possible to restore connection history after resetting the router?
No, when resetting (Reset) all logs and settings are resetIf you didn't export your data beforehand, it's impossible to recover. To avoid future data loss:
- 📤 Set up automatic log export to an external server (if the router supports it).
- 📊 Use third-party programs for network monitoring (e.g. PRTG Network Monitor).
How can I check if my neighbor is stealing my Wi-Fi if the logs don't show anything suspicious?
Even if there are no logs, there are indirect signs of a Wi-Fi "leak":
- 🐢 Internet speed is dropping at normal times (for example, in the evening).
- 🔋 The router is overheating or reboots frequently.
- 📡 The Wi-Fi indicator is blinkingwhen all your devices are turned off.
To check:
- Disconnect all your devices from Wi-Fi.
- Look at activity indicator on the router - if it is blinking, someone is using your network.
- Check it out traffic in the admin panel (if there is such a function).
Which routers have the best connection history?
If you are interested in detailed statistics, consider these models:
- 🥇 ASUS RT-AX88U — maintains traffic logs, supports AiProtection (anti-hacking protection).
- 🥈 Keenetic Ultra — saves connection history for up to 30 days, includes DNS monitoring.
- 🥉 MikroTik hAP ac² - full control through
Winbox, script support. - 💰 Budget option: TP-Link Archer C7 (with firmware) OpenWRT).
Avoid cheap models like TP-Link TL-WR840N or D-Link DIR-615 - They don't keep logs or only keep them for a few hours.