A slow internet speed or sudden spikes in ping are often the first warning signs that your wireless network has been accessed by unauthorized individuals. In the digital age Wi-Fi network It's a key element of your home infrastructure, connecting smartphones, laptops, smart speakers, and video surveillance systems. If you notice your router is working at its maximum capacity even though you're not downloading anything, you should immediately check the list of connected clients.
There are many ways to detect uninvited guests, from using the router's built-in web interface to specialized traffic scanning utilities. It's important to understand that the network administrator—that's you—has access to the list of devices, but this requires access rights to the equipment's settings. In this article, we'll detail all possible diagnostic methods, help you identify each device by MAC address, and explain how to reliably protect your home network perimeter from repeat intrusions.
Using the router's web interface
The most reliable and accurate way to find out who is connected to your Wi-Fi is to access your router's admin panel directly. The data it provides router, are the primary and most relevant, as the device itself manages IP address distribution. To log in, you'll need the gateway address (usually 192.168.0.1 or 192.168.1.1) and administrator credentials, which are often found on a sticker on the bottom of the device.
After authorization, the interface may look different depending on the manufacturer and firmware version. You need to find the section related to wireless connections or network status. For example, in the menu Status or Network Map A graphical diagram often displays the number of active clients. More detailed information is contained in DHCP logs or ARP lists, where each device is assigned a unique identifier.
⚠️ Note: Firmware interfaces are updated regularly. The menu layout may differ from that described in the instructions, so look for sections labeled "Client," "Station," "Wireless," or "Client List."
By analyzing the list, you'll see not only the IP addresses but also the MAC addresses of connected devices. This is a critical parameter, as the IP address can change when reconnecting, and MAC address It's physically embedded in the device's network card and remains permanent. This code allows you to accurately determine whether the device belongs to you or your neighbor.
Instructions for popular router models
Let's look at specific navigation paths for the most common brands of equipment, as their menu logic varies significantly. Understanding your router's structure will help you quickly find the information you need without a lengthy search.
For devices TP-Link (especially with a blue interface) the path usually lies through the tab Wireless (Wireless mode) -> Wireless Statistics (Statistics). In new TP-Link Tether cloud-managed models, the list of active clients is displayed directly on the main page as icons. For routers ASUS With ASUSWRT firmware, click the "Network Map" icon on the left, then select the "Clients" icon on the right side of the screen. Here you can see not only the device name but also the connection speed.
In equipment Keenetic (formerly Zyxel Keenetic) information is available in the "Client List" menu on the bottom panel or through the "My Networks and Wi-Fi" tab. The unique Keenetic interface allows you to see not only wired and wireless connections but also the guest network separately. Routers Mikrotik require more in-depth knowledge: the list of connections is in the menu IP -> DHCP Server -> tab Leases.
☑️ Router check
Below is a comparison table of paths to the required settings for quick orientation:
| Router brand | Menu section | Subsection | What to look for |
|---|---|---|---|
| TP-Link | Wireless | Wireless Statistics | List of MAC addresses |
| ASUS | Network Map | Clients | Device icons |
| Keenetic | My Networks and Wi-Fi | Client list | Connection table |
| D-Link | Status | Active Clients | IP and MAC addresses |
Specialized programs for PC
If access to the router's web interface is blocked for some reason or the interface is too complex, you can use third-party computer software. These utilities scan the local network and identify all active nodes using the ARP and ICMP protocols. One of the most popular tools is Wireless Network Watcher from NirSoft.
This program requires no installation; the portable version launches instantly and immediately lists all devices that responded to the request. It displays the IP address, MAC address, network card manufacturer (e.g., Apple, Samsung, Intel), and the last detected time. This allows you to quickly determine if there are any unknown devices on the network. gadgetsAnother powerful tool is Advanced IP Scanner, which works similarly, but has a more modern interface and port scanning capabilities.
⚠️ Warning: Antivirus programs may detect network scanners as potentially unwanted software (PUP) because they actively scan ports. Please add the program to the exceptions list or temporarily disable protection for diagnostic purposes.
For advanced users there is a utility Angry IP Scanner, which is cross-platform and runs on Java. It allows you to scan not only your local network but also any IP address range, displaying the response time (ping). This is useful for understanding how "alive" a particular connected node is at a given time.
Why might the program not see all devices?
Some devices may block ICMP requests (pings) at the firewall level, so they won't respond to the scanner but will continue to consume traffic. In this case, only checking through the router will help.
Mobile applications for Android and iOS
Checking the network from a smartphone is the fastest way to diagnose problems, as your phone is always at hand. For the platform Android There are many applications, for example, Fing or WiFi AnalyzerThe Fing app is considered one of the best: it not only displays a list of devices but also attempts to identify their type (TV, camera, phone) and even model by checking its manufacturer database.
On devices iPhone (iOS) scanning capabilities are limited by Apple's security policy, which prohibits apps from performing deep port scans. However, apps like Network Analyzer Lite or Fing (in the basic version) can still display a list of devices connected to the current Wi-Fi network using available system APIs. They will display IP and MAC addresses, which is sufficient for a basic check.
Mobile apps are convenient because they often have notification features. You can set up an alert, and if a new device connects to the network, your phone will immediately notify you. This turns your smartphone into a pocket-sized device. security monitor.
How to identify a device by MAC address
When you receive a list of connections, you may see lines like "Unknown Device" or just a string of numbers. To figure out who the device belongs to, look at the first six characters of the MAC address (XX:XX:XX format). These are the first three bytes, called OUI (Organizationally Unique Identifier), which are assigned to a specific manufacturer.
There are online services and databases where you can enter a MAC address and get the name of the manufacturer. For example, if the address starts with 00:1A:2B, a search will reveal that this equipment is from Asus. If you see a device with a MAC address from a security camera manufacturer, but you don't have one, this is cause for concern. Also, pay attention to device names (hostnames), which are often broadcast to the network by default (for example, "Ivan-iPhone" or "LivingRoom-TV").
Sometimes the list may contain strange names, such as "android-dh392." These are standard names for budget Android smartphones that the user didn't change upon first launch. Don't panic; first, check the number of such devices against the number of phones in your home.
Methods of protection and blocking uninvited guests
If you detect an unauthorized user, the first thing you should do is change the Wi-Fi network password. This will force the connection to be broken on all devices, forcing you to reconnect them, but will also block the attacker's access. However, this is a temporary measure if the password is discovered again.
A more effective method is MAC filteringYou can enable "White List" mode in your router settings. In this mode, only devices whose MAC addresses you've manually added to the allowed list will be able to connect to the network. Even with the password, any other device will be unable to access the internet.
It's also recommended to disable the WPS feature, as it often contains vulnerabilities that allow hackers to crack the network password in a matter of hours using special scripts. Ensure you're using a modern encryption standard. WPA2-PSK or WPA3, and not the outdated WEP, which can be cracked in minutes.
⚠️ Caution: Be careful when enabling MAC filtering. If you accidentally fail to whitelist your current device's MAC address, you will lose connection to the router and won't be able to access the settings to fix the error until you reset it using the reset button on the router.
Regularly checking your client list and updating your router firmware are key to a stable and secure home network. Don't ignore any unusual activity, as your network may be used for illegal activities that the police can track using your IP address.
Can my neighbor use my Wi-Fi if I hide the network name (SSID)?
Yes, hiding your SSID isn't a reliable security method. Specialized software can easily detect "hidden networks" and monitor the data packets sent by your devices. An attacker could simply wait for you to connect to intercept the network name and attempt to brute-force the password.
Does the number of connected devices affect internet speed?
Absolutely. The Wi-Fi channel is shared between all active clients. If one of your neighbors starts downloading large files or watching 4K videos over your network, your page loading speeds could drop to practically zero, as the router will be busy processing their traffic.
What should I do if I don't remember my router admin password?
If the default login and password (often admin/admin) don't work and have been changed previously, the only way to regain access is to perform a hard reset. To do this, press and hold the Reset button on the router for 10-15 seconds. This will reset the router to factory settings, and the password will be the one indicated on the sticker.
Is it dangerous if someone else's smart TV connects to the network?
Yes, this is dangerous not only because of traffic theft. While on the same local network, an attacker could attempt to access shared folders on your computer, launch a virus, or use your device as a proxy for attacks on other servers.