A drop in internet speed, sudden connection drops, or a blinking wireless network indicator are often the first warning signs for a home router owner. When you're paying for gigabytes and the speed drops to a crawl, the first suspicion that neighbors or unscrupulous acquaintances are "sitting" on your connection arises. This isn't just an annoyance, but also a direct threat to the security of your personal data transmitted over the local network.
Fortunately, modern routers give the administrator complete control over connected clients. Whether you're using equipment from TP-Link, Asus, Keenetic or provider EltexThe principle of detecting "intruders" remains similar. You need to access the device's web interface and carefully examine the list of active connections, which displays IP addresses, MAC addresses, and sometimes device names.
In this article, we'll detail the steps for checking your client list, explain how to distinguish your smartphone from someone else's laptop, and describe methods for blocking unwanted visitors. Understanding these processes will allow you not only to restore your provider's advertised speed but also to set up reliable perimeter protection for your home network.
Symptoms of unauthorized network access
Before messing with your router settings, it's worth analyzing indirect signs that may indicate the presence of unauthorized users. Users often confuse ISP issues with bandwidth congestion, but there are specific indicators that shouldn't be ignored. If your router is stable, but your internet connection slows down in the evening, when your neighbors are also active, this is a good time to check.
Pay attention to the indicators on the device's body. If you've turned off all your gadgets and the light is still on WLAN or Wi-Fi If the light continues to flash frequently and erratically, it means there's active data transfer. This could indicate background torrent downloads, game updates, or someone else streaming videos.
⚠️ Note: Active traffic doesn't always mean hacking. Many modern devices (smart bulbs, TVs, set-top boxes) constantly update data in the background. First, make sure all your gadgets are not transmitting information.
There are a number of obvious signs that should alert the network owner:
- 📉 A sharp drop in download and upload speeds that does not correspond to the provider's tariff.
- 🔒 Access to router settings is blocked (the administrator password has been changed).
- 📡 Devices spontaneously disconnect from Wi-Fi for no apparent reason.
- 💻 The appearance of unknown computer or printer names in the network environment.
For initial diagnostics, you can use special utilities on your PC, such as Wireless Network Watcher or Fing on your smartphone. They scan the network faster than the router's web interface and can display basic device information even before you log into the control panel.
Login to the router control panel
To access the list of connected devices, you need to log in to the router's web interface. This can be done through any browser (Chrome, Firefox, Safari) on a device that is already connected to the network, whether via cable or Wi-Fi. The login address is usually located on a sticker on the bottom of the device.
The standard address for most models is 192.168.0.1 or 192.168.1.1Some manufacturers, for example, Keenetic or Asus, use domain names of the form my.keenetic.net or router.asus.comEnter this address into your browser's address bar and press Enter.
The system will ask for your login and password. If you have never changed this information, it will also be indicated on the sticker (often this is admin/admin). If the data was changed earlier and forgotten, you will have to perform a factory reset using the button Reset.
⚠️ Note: Firmware interfaces are constantly being updated. Menu locations may vary depending on your router's firmware version. If you can't find the item you need, look for sections labeled "Status," "Network Map," or "Clients."
After successfully entering your credentials, you'll be taken to the main status page or control panel. This is where the search for "guests" begins.
Search for connected devices in the interface
Interfaces vary significantly between manufacturers, but the logic for displaying client information is the same. Find the section responsible for the wireless network or local network status. It's usually called "Wireless," "WLAN," "Client List," "DHCP Client List," or "Network Map."
In routers TP-Link the information you are looking for is often found in the menu Wireless → Wireless Statistics or on the main page in the "Clients" block. Asus You need to go to the "Network Map" section and click on the "Clients" icon. In the equipment Keenetic This is the "My Networks & Wi-Fi" tab or the device list icon on the main panel.
In the list that opens, you will see a table with data. The key parameters here are IP address, MAC address And Device name (Hostname) The device name often helps identify the owner, for example, "Ivan-iPhone" or "LivingRoom-TV."
If you see a device in the list that you can't identify, don't panic. It might be your old tablet, game console, or smart plug that you just don't remember. Compare the number of rows in the table with the actual number of gadgets in your home.
Identifying devices by MAC address
The most reliable way to distinguish your device from someone else's is to check the MAC address. This is a unique identifier for a network interface assigned by the manufacturer and consists of 12 hexadecimal characters (e.g., A1:B2:C3:D4:E5:F6). The device name (Hostname) can be easily changed by the user, but the MAC address is more difficult to forge, although possible.
To check your devices, find the MAC address in the settings of each gadget. On Android, this is Settings → About phone → General information, on iPhone Settings → General → About, on Windows ipconfig /all in the command line. Write down these addresses or take screenshots.
Compare the data you've received with the list on your router. If a device listed is named "Unknown" or has a suspicious character set, and its MAC address doesn't match any of your devices, this is cause for concern. Also, pay attention to the connection type: if you don't have a Smart TV, but the list shows "Samsung TV," this is a clear sign of an intruder.
For ease of comparison, you can use the following table of manufacturers' correspondence based on the first three pairs of MAC address (OUI) characters:
| MAC Prefix (OUI) | Probable manufacturer | Typical device | Note |
|---|---|---|---|
| 00:1E:58 | Apple | iPhone, iPad, Mac | A frequent guest on the list |
| B8:27:EB | Raspberry Pi | Single-board computer | Used by enthusiasts |
| 00:50:56 | VMware | Virtual machine | Rarely found in home networks |
| F4:F5:D8 | Chromecast, Android TV | Media set-top boxes | |
| 3C:5A:B4 | Hewlett Packard | Printers, laptops | Office equipment |
Blocking unwanted users
If you detect an intruder, you must block them immediately. The simplest and most effective method is to use MAC filtering. This feature allows you to create a "blacklist" of devices that will be denied network access, or, conversely, a "whitelist" that allows access only to select individuals.
To block a device, find the "MAC Filtering" or "Access Control" section in the router interface. Select "Deny" and add the offending device's MAC address to the list. After saving the settings and rebooting the router, the device will lose connection and will be unable to reconnect, even if it knows the Wi-Fi password.
However, a skilled attacker can change the MAC address of their adapter to an authorized one. Therefore, the most reliable protection is to change the wireless network password. Changing the password will disable all devices, and you will have to re-enter the new key on all your devices. It is recommended to use standard encryption. WPA2-PSK or WPA3 and a complex password.
☑️ Action plan if a hack is detected
Don't forget to turn off the feature as well WPS, which is often vulnerable to password guessing. It's usually located in the Wireless Settings section. After disabling WPS, connecting new devices will only be possible by manually entering the password.
Strengthening wireless network security
After clearing your network of "pirates," it's important to secure the results to prevent a recurrence. Modern cybersecurity requires a comprehensive approach. Don't rely solely on a strong password, as a neighbor could discover it while you're visiting, or it could be brute-forced if the encryption algorithm is weak.
It's recommended to update your router firmware regularly. Manufacturers release updates that patch security holes. You can check for a new version in "System Tools" or "Administration" -> "Firmware Update."
⚠️ Note: If you are using a router provided by your ISP, access rights to some security features may be limited. In this case, please contact your ISP's technical support to enhance security or replace the equipment.
Additional protective measures:
- 🔐 Change the standard SSID (network name) to a unique one that does not contain personal data (address, last name).
- 📡 Reduce the signal strength if the apartment is small, so that the signal cannot be received on the street.
- 🚫 Disabling Remote Management from the external network.
- 📅 Set up a Wi-Fi schedule if you don't need internet at night.
What is a guest network and why is it needed?
A Guest Network is a separate wireless channel with its own password. By connecting guests to it, you isolate them from your primary devices (printers, NAS, computers with files), increasing overall security.
Following these rules will make your network virtually invulnerable to random neighbors and basic attacks.
Frequently Asked Questions (FAQ)
Can my neighbor steal my internet if I hide my network name (SSID)?
Hiding your SSID isn't foolproof. The network remains visible to specialized scanners, and devices that previously connected to it continue to broadcast connection requests. This is more of an inconvenience to you than a real deterrent to hackers.
Will the attacker change the MAC address if I block him?
Yes, a tech-savvy user can clone the MAC address of any of your authorized devices. That's why MAC blocking is a temporary measure. The main protection is a complex WPA2/WPA3 encryption password that can't be automatically cracked within a short period of time.
Does the number of connected devices affect internet speed?
Absolutely. The Wi-Fi channel is shared among all active users. If someone is downloading large files or watching 4K video, the speed on other devices will drop. Furthermore, a large number of devices puts a strain on the router's processor, which can cause it to freeze.
How often should I change my Wi-Fi password?
It is recommended to change your password at least once every 3-6 months, or immediately after you stop trusting someone who previously had access (for example, after a party or when tenants leave).