When an internet connection suddenly slows down and pages load slowly, it often leaves users perplexed. This is especially frustrating if you have a high-speed plan, but your actual speeds are far from what your provider claims. One of the most common causes of this kind of network behavior is unauthorized access to your access point.
Operator Rostelecom provides subscribers with modern equipment that allows for detailed control of network activity. However, standard settings are often hidden from the average user, requiring access to the administrative panel. Understanding how to view a list of connected devices is becoming a key skill for ensuring personal digital security.
In this article, we'll explore not only software methods for monitoring computer traffic but also the native capabilities of routers. You'll learn how to identify "guests," the dangers of their presence, and the specific steps you need to take to permanently block access to uninvited users. The only way to reliably remove someone else's device is to change the Wi-Fi password and MAC filtering in the router settings.
Signs of unauthorized network access
The first warning sign for home internet users is usually a sharp drop in speed. If you're used to 4K movies loading instantly, but now you're buffering every five seconds, it's time to be wary. However, a drop in speed can also be caused by technical issues with your provider's line or by congestion in the evening.
A more obvious indicator is the strange behavior of the indicators on the router body. The light WLAN Or the wireless network icon may flash frequently and erratically, even when you've turned off all your devices or left the house. This indicates that there's an active exchange of data packets between the router and an external device.
⚠️ Warning: If you notice that your antivirus or firewall on your computer starts blocking suspicious incoming connections from your local network, this is a clear sign that there is a third-party device on your network attempting to scan ports.
It's also worth paying attention to data usage. This is less noticeable with unlimited plans, but if you have data caps, suddenly depleting your limit without any active intervention from your household is a warning sign. Modern download apps or streaming services can eat up gigabytes in the background on someone else's device.
Using specialized software for PC
The easiest way to get a picture of what's happening on your network without delving into complex hardware settings is to use third-party scanning utilities. These programs analyze ARP tables and ICMP requests, identifying all active IP addresses on the current network segment. For the operating system Windows There are many free tools available.
One of the most popular and functional programs is Wireless Network Watcher from NirSoft. It requires no installation, works immediately after launch, and provides comprehensive information: IP address, MAC address, network adapter manufacturer, and even the computer name. This allows you to immediately determine whether it's a Samsung phone, an Asus laptop, or a smart speaker.
Another powerful tool is the utility Angry IP ScannerIt works cross-platform and allows scanning not only the local network but also any IP address range. Unlike simple scanners, it can check open ports, providing additional information about what a device is doing on the network—whether it's distributing files or simply consuming traffic.
Before launching, make sure you download the software from the developer's official website to eliminate the risk of infection with real malware.
Analyzing connections via the router's web interface
The most reliable information that can be obtained is stored by the router itself. Equipment from Rostelecom (often Sagemcom, Eltex, Sercomm, or Huawei models) have a built-in web interface accessible via a specific IP address. This method requires no additional software and works on any computer connected via cable or Wi-Fi.
To access the control panel, you need to open your browser and enter the gateway address in the address bar. Most often, this is 192.168.1.1 or 192.168.0.1The exact address, as well as the default login and password, are located on a sticker on the bottom of the device. Default credentials often look like this: admin/admin or user/user, but it's better to check the label.
After successful authorization, the interface may differ depending on the model, but the logic is the same. You need to find a section called "Status," "WLAN," or "Local Network." This is where the table of active clients (DHCP Client List or Associated Devices) is located.
⚠️ Please note: Firmware interfaces are regularly updated by the operator. If you can't find the menu item you need, look for sections labeled "Client," "Station," or "Client List." The menu structure is subject to change without notice.
In the list of connected devices, you'll see their MAC addresses. This is a unique identifier for the network card. By comparing the first six characters of the MAC address (OUI) with manufacturer tables, you can easily identify the device brand, even if it doesn't have a user-friendly name on the network.
☑️ Router security check
Decoding MAC addresses and identifying devices
Once you've received a list of connected devices, you'll be faced with the task of figuring out who's who. A MAC address looks like a set of six pairs of hexadecimal numbers separated by colons, for example, A4:5E:60:C2:11:09The first three pairs of characters are a prefix assigned to a specific equipment manufacturer.
There are online OUI (Organizationally Unique Identifier) databases that allow you to identify the manufacturer by its prefix. For example, prefixes starting with A4:5E:60, are owned by Apple, and B8:27:EB — it's a Raspberry Pi. Knowing what devices you have at home can easily identify an intruder.
For ease of checking, you can use the following table of common prefixes:
| MAC Prefix (OUI) | Manufacturer | Typical devices |
|---|---|---|
| A4:5E:60 / 00:1B:63 | Apple | iPhone, iPad, MacBook |
| 68:A8:6D / 2C:F0:5D | Huawei | Smartphones, routers |
| B8:27:EB / DC:A6:32 | Raspberry Pi | Single-board computers |
| 00:1A:79 / 00:22:43 | Sony | PlayStation, Smart TV |
| F4:F5:D8 / 18:59:36 | Android, Chromecast |
If a device with an unknown manufacturer appears in the list, or if there are more devices than you own, this is cause for concern. Some modern routers allow you to assign user-friendly names to devices directly in the interface, making further monitoring easier.
Blocking methods and network protection
Once you've detected an intruder, you need to act quickly. The simplest, but not the most reliable, method is to disable the device through the router's web interface. The client list usually includes a "Block" button, or the option to remove the device from the DHCP list. However, this is only a temporary measure: if the hacker's phone password is changed, they will be able to connect again.
The radical solution is complete change password to a Wi-Fi network. When you change the security key, all devices will be disconnected, and only those who know the new password will be able to reconnect. We recommend using a complex password consisting of mixed-case letters, numbers, and special characters, at least 12 characters long.
The most effective method of protection is to set up MAC filteringThis feature allows you to create a "whitelist" of devices that are allowed to connect. Even if an attacker discovers your password, their device will be rejected by the router because its MAC address isn't on the whitelist.
What happens if you enable MAC filtering?
All devices whose addresses aren't whitelisted will lose network access, even if they know the password. You'll have to manually enter the MAC addresses of all your home gadgets (TVs, phones, and consoles).
It is also worth disabling the function WPS in the router settings. This technology is designed to simplify connections, but has known vulnerabilities that allow brute-force attacks to crack the password in a matter of hours. Disabling WPS significantly increases security.
Frequently asked questions and technical nuances
Users often encounter situations that require clarification. For example, many confuse the IP address assigned by the provider (WAN) with the local address of the device (LAN). To view connected clients, you're interested in the local network, and external IP addresses are irrelevant.
Another important point is the "sleep mode" of devices. If a smartphone or laptop is in sleep mode, it may not appear in the list of active connections in real time, but it may still be formally associated with the access point. Therefore, when analyzing the list, keep in mind that some devices may be inactive right now.
⚠️ Warning: Do not use Wi-Fi hacking software to test your neighbors' networks. Such actions are illegal and may result in your own equipment being blocked by your ISP or legal consequences.
In some cases, the router may show devices that are physically located far outside the apartment. This may happen if your neighbors entered the password incorrectly, or if your signal is very strong. In any case, it's your responsibility to manage your client list.
Can a connected neighbor see my files on my computer?
If you have network discovery and passwordless file sharing enabled in your operating system, then theoretically yes. However, modern versions Windows When connecting to a new network, you are automatically assigned the "Public Network" profile, which blocks incoming connections and makes your PC invisible to others.
Why are strange names displayed in the device list?
Devices often broadcast their "Hostname," which may have been set by the manufacturer during assembly (for example, "android-df8a9b" or "living-room-tv"). This is normal. They can be identified by their MAC address or by disconnecting your devices from Wi-Fi one by one and observing how the entries disappear from the list.
How often should I change my Wi-Fi password?
Security experts recommend changing your password every three to six months, especially if you have any suspicions. However, if you use a complex, unique password and disable WPS, the need for frequent changes is reduced. The main thing is to avoid passwords like "12345678" or "rostelecom."
Does the number of connected devices affect internet speed?
Yes, the connection channel is shared among all active users. If one of the "guests" starts downloading torrents or watching 4K videos, your speed on other devices will inevitably drop, as Wi-Fi is half-duplex, and devices transmit data in turns.