Slow internet speeds or sudden connection interruptions are often the first warning signs that someone may have accessed your home network. ISP equipment owners Rostelecom Regularly face the need to manage a list of active devices, especially in apartment buildings where the signal range is extensive. Modern routers offer administrators extensive traffic monitoring capabilities, but not all users know where to find this data.
Regardless of the model of your device, be it Sercomm, D-Link or TP-LinkThe principle for detecting illegal devices remains the same. You'll need access to your router's web interface or a specialized mobile app from your provider. In this article, we'll detail the steps for different types of equipment, explain how to distinguish your devices from others, and what security measures to take immediately after detecting a traffic leak.
Ignoring this problem can lead not only to slow page loading speeds but also to potential data theft if an attacker gains access to shared folders or network printers. Therefore, quickly checking connected clients is a basic skill for every subscriber. We'll cover both classic browser-based methods and more modern smartphone-based management.
Signs of unauthorized network access
The first and most obvious sign of a "neighbor" on your network is a sharp drop in internet speed. If you're used to 4K video loading instantly, but now it's constantly buffering even when torrents are closed, you should be wary. drop in speed It could also be caused by technical problems on the provider's line or overheating of the router, so a comprehensive approach to diagnostics is needed.
Pay attention to the indicators on the device's body. Many router models have these. Rostelecom There's a WLAN or Wi-Fi light that flashes at a specific frequency when data is being transmitted. If all your devices are turned off or in sleep mode, and the light continues to flash rapidly and erratically, this is a sure sign of background network activity. This behavior is typical of someone downloading files or streaming video.
⚠️ Note: Some modern apps on smartphones and TVs Smart TV They can update or sync data in the background, even without active user intervention. Before panicking, make sure the flashing indicator isn't your TV or game console.
Another sign may be an inability to access the router settings. If, when attempting to log in to the web interface, you see a message stating that an administrator is already logged in, even though you weren't, someone else is managing your equipment. An attacker may have changed the Wi-Fi password or security settings, blocking access to the legitimate owner.
Preparing for testing: accessing the router interface
To begin diagnostics, you need to access your router's administrative panel. This can only be done from a device that is already connected to the network, whether via cable or Wi-Fi. Open any browser on your computer or smartphone and enter the gateway IP address in the address bar. For most routers, Rostelecom the standard address is 192.168.0.1 or 192.168.1.1.
If the standard addresses are not suitable, you can find out the current IP address through the command line on your computer. Click Win + R, enter cmd and run the command ipconfigFind the "Default Gateway" line—the numbers listed there are your login address. This information is often also found on a sticker on the bottom of the router, along with your login and password.
When you try to log in, the system will ask for credentials. By default for the equipment Rostelecom the combination is often used admin / admin or admin / 1234If you previously changed your password and forgot it, you'll need to perform a factory reset, which will require you to reconfigure your internet connection.
☑️ Check before entry
After successful authorization, the control panel will open. The interface may differ depending on the model (for example, RT-PM-01 or Sagemcom), but the menu layout is the same. You need to find the section related to the wireless network or connection status.
How to view connected devices via the web interface
In your router's interface, look for a tab labeled "Status," "Network Map," or "Wireless." In modern firmware versions, Rostelecom The term "Client List" or "DHCP clients" is often used. This is where you'll see a table of all the devices currently receiving an IP address from your router.
In the list that opens, you'll see several columns with technical information. Typically, these include the MAC address, IP address, device name (Hostname), and connection type (Wireless or LAN). The device name may be specified by the manufacturer, for example, iPhone, Android or Windows-PC, but sometimes just a set of characters is displayed.
What should I do if device names are not displayed?
If the name column contains a dash or an unknown code, use the MAC address as a reference. The first six characters of the MAC address (OUI) identify the network adapter manufacturer. You can enter this code into an online OUI database search to find the device brand (e.g., Samsung, Xiaomi, Apple).
Review the list carefully. If you see a device that doesn't belong to your family, or if the number of active connections exceeds the actual number of devices, then access is open to outsiders. Devices with a "Wireless" connection type are especially suspicious if you know for sure that all your devices are currently turned off.
For ease of comparison, below is a table explaining the main parameters you'll see in the client list:
| Parameter | Description | What to look out for |
|---|---|---|
| MAC address | Unique physical address of the network card | The main identifier that cannot be hidden (without special means) |
| IP address | Internal address in the local network | May change upon reconnection (dynamic IP) |
| Lease Time | The time for which the IP address is issued | Long periods of activity indicate a constant presence |
| Interface | Connection type (LAN/WLAN) | WLAN means Wi-Fi connection, LAN means cable connection |
The presence of an unfamiliar MAC address in the list is a 100% confirmation of a hack. Write it down, as you'll need it to block it. Some routers allow you to immediately click "Block" or "Delete" next to a suspicious device, but it's best to review the security settings first.
Verification via the Rostelecom.Key mobile app
For users who find it inconvenient to access the web interface through a browser every time, the provider offers a mobile application Rostelecom.Key (or My Rostelecom with router management functions). This is a modern and more user-friendly monitoring method, available on Android And iOSThe app allows you to manage your network remotely, even when you're away from home, if your router supports cloud functionality.
After logging into the app using your account number or contract number, go to the "Equipment" or "My Wi-Fi" section. Your current network status will be displayed there. In the "Devices" or "Clients" section, you'll see a graphical representation of all connected devices with operating system icons.
The app's advantage is that it frequently sends push notifications about new connections. If an unknown device attempts to connect to the network, you'll receive a warning. You can instantly block the intruder with a single tap of the screen, without entering any IP addresses.
⚠️ Note: App functionality may vary depending on your router model. Older router models Rostelecom may not support full remote control and client list display via the cloud, requiring a local Wi-Fi connection to operate.
If the app shows the router's status as "Offline," make sure your phone is connected to your Wi-Fi network and not your mobile data. Local control is only possible when within the network.
Block unknown users and protect your network
Once you detect an intruder, you must immediately block their access. The most effective method is MAC address filtering. In the router's web interface, find the "MAC Filter" or "Client Blocking" section. Add the intruder's MAC address to the Blacklist and activate the rule.
However, simply blocking is not enough, as a hacker can change the MAC address of their device. A critical step is to change the password for the Wi-Fi network. Go to the wireless settings (Wireless Settings) and change the security key (Pre-Shared Key). After saving the settings, all devices will be disabled, and you will need to re-enter the new password on your devices.
It is also recommended to disable the function WPS (Wi-Fi Protected Setup). This technology allows you to connect to the network by pressing a button or using a PIN code, but it has known vulnerabilities that allow attackers to easily guess the password. In the router interface, find the WPS section and select "Disabled."
After changing the password and blocking the MAC address, it's recommended to reboot the router. This will clear the ARP table and DHCP leases, ensuring that old sessions don't remain active. You can access the menu via System Tools → Restart.
Setting up maximum Wi-Fi network security
To prevent the problem from recurring, you need to set the encryption to the highest possible level. In the wireless security settings (Wireless Security) select the encryption mode WPA2-PSK or, if the equipment supports it, WPA3. Mode WEP or open access (Open) should not be used under any circumstances - they will break in a few minutes.
Change the default password for accessing your router settings (admin/admin). Many users forget to do this, and anyone connected to the Wi-Fi network will be able to access the admin panel and change the settings. Create a unique password for the web interface and store it in a safe place.
Another useful feature is hiding the SSID (network name). If you enable the "Hide SSID" option, your network won't appear in your neighbors' list of available networks. You can only connect to it by manually entering the network name and password. This doesn't provide 100% protection, but it does reduce the risk of unwanted intruders.
Regularly check the list of connected devices, especially if you live in a densely populated area. Regular monitoring is the best guarantee of stable speed and data security.
What happens if I block a device that is actually mine?
Nothing bad will happen. The device will simply lose access to the internet and local network. You can always remove the MAC address from the blacklist in the router settings, and the device will be able to connect again with the correct password.
Can my neighbor find out my Wi-Fi password?
If you use strong WPA2/WPA3 encryption and a complex password, brute-forcing it is virtually impossible. However, if one of your guests knows the password, they could share it with others. The password could also be saved on a stolen phone or tablet.
Will my router reset if I turn off the power?
No, a short power outage does not reset the router. A factory reset only occurs after an extended power outage (rare) or by pressing the Reset button on the router for 10-15 seconds.
Why are there so many strange names in the device list?
Many modern gadgets (smart plugs, lamps, vacuum cleaners) have complex technical names in their network identifiers. This is often a combination of the brand and chip model. It's better to focus on the number of devices and MAC addresses.