Detecting slow internet speeds or intermittent connection drops often indicates that unauthorized individuals have accessed your network. Modern password-guessing techniques allow intruders or simply curious neighbors to bypass WPA2 protection in a matter of hours using a simple combination of characters. This is why regularly monitoring the list of connected clients is a must for any home network administrator.
Fortunately, the Windows operating system and the web interfaces of most routers provide powerful tools for visualizing network activity. You don't need to be a professional hacker or install complex software to gain complete control. All you need is the gateway IP address and the standard navigation paths in your router's menus.
In this article, we'll cover in detail all available methods for checking connected devices, from built-in command line tools to in-depth analytics via the router's admin panel. You'll learn not only how to identify uninvited guests but also how to quickly block their access, as well as strengthen the security of your wireless access point.
Using the Windows Command Prompt for Initial Diagnostics
The fastest way to get information about your network environment is to use the built-in utility command lineThis method doesn't require logging into the router settings and works even if you've forgotten the password for the device's administrative panel. It displays active ARP tables, which contain mappings between IP addresses and physical MAC addresses of devices on the local network.
To start diagnostics, press the key combination Win + R, enter cmd and press Enter. In the black terminal window that opens, you need to enter the command arp -aThe system will display a list of all devices with which your computer exchanged data during the last session. Please note that this may display not only active users but also devices that were recently online.
The list will show IP addresses and their corresponding MAC addresses. To identify the device behind an address, you can compare the first six characters of the MAC address (OUI) with a list of manufacturers online. However, this method has a limitation: it won't reveal devices that are in sleep mode and haven't transmitted data to your computer in a while.
If you spot a suspicious IP address that doesn't match your devices, it's time for a deeper investigation through the router's web interface. The command line only provides a superficial overview, but it's great for quickly checking for active connections at any given time.
Logging into the router's web interface: standard addresses and passwords
The most complete and up-to-date information about connected clients is provided by the router itself. To access this data, you need to log in to its web interface. The standard login address for most manufacturers, such as TP-Link, Asus or D-Link, is a combination 192.168.0.1 or 192.168.1.1Enter this IP address in the browser's address bar and press Enter.
If the default addresses don't work, you can find out the current gateway address through the command line. Enter the command ipconfig and find the line "Default Gateway." This IP address is the entryway to your network equipment settings. After entering the address, the system will ask for a username and password.
⚠️ Attention: If you've never changed the default login information, it's likely printed on a sticker on the bottom of your router. Default login/password pairs are often
admin/adminoradmin/password, but in modern models the password is unique for each device.
If you lose your admin panel password, the only secure way to restore access is to perform a full factory reset (hard reset). There's a recessed button on the device for this purpose. Reset, which you need to hold for about 10-15 seconds while the power is on. Keep in mind that this action will erase all your current provider settings.
Analysis of client lists in popular router interfaces
The interfaces of different manufacturers vary greatly in menu structure, but the logic for searching for connected devices remains the same. This section is typically called "Client List," "Network Map," "Wireless Status," or "DHCP Client List." Let's look at the navigation features for the most common brands.
In routers TP-Link And Tenda look for the tab Wireless (Wireless mode) and then subsection Wireless Statistics or Statistics. This displays a table with MAC addresses and the current data transfer status. The equipment Asus And Zyxel There is often a separate graphical network map on the main page/dashboard, where all connected devices are visually displayed.
Modern routers Keenetic And MikroTik provide detailed information, including the device's hostname, allowing you to immediately identify whose phone or laptop it is. For example, you might see names like iPhone-Aleks or Samsung-TV, which greatly simplifies identification.
| Router brand | Path to the menu | Section title |
|---|---|---|
| TP-Link | Wireless -> Wireless Statistics | List of stations |
| Asus | Network Map -> Clients | Network map |
| D-Link | Status -> Device Info -> Wireless | WLAN status |
| Keenetic | Home -> Client List | List of devices |
Pay attention to the number of active connections. If you see a device you can't identify, don't panic. It might be your own. Smart TV, game console, or smart home device you forgot to account for. Check the MAC addresses against your gadgets' settings for accurate identification.
How to distinguish your device from someone else's by its MAC address
The most reliable method of identification is to check the MAC address. This unique identifier is assigned to the network adapter during manufacturing and consists of 12 hexadecimal characters. The first six characters (OUI) identify the hardware manufacturer, for example, 00:1A:2B may belong to the company Apple, A B8:27:EB — Raspberry Pi.
To check the MAC address of your computer or phone, go to your network settings. On Windows, this is done via Settings -> Network & Internet -> PropertiesOn Android the path usually looks like this Settings -> About phone -> General informationWrite down the addresses of all your devices and compare them with the list in the router.
What does MAC address randomization hide?
Modern versions of iOS and Android have a MAC address randomization feature enabled to enhance privacy. This means a device may use a temporary address when connecting to WiFi, which will be different from its physical address. In the router, such a device may appear as "Unknown" or have a changing address, which can sometimes make filtering difficult.
If you see a device in your router's list with a name you don't recognize, and its MAC address doesn't match any of your devices, there's a high probability of unauthorized access. Devices with names like Android-xyz or generic names if you don't have equipment from these brands.
Methods for blocking uninvited guests and protecting your network
Once an intruder is detected, it is necessary to immediately restrict their access. The most effective method is to use Blacklist (blacklist) or Whitelist (whitelist) in the router settings. Blacklist allows you to deny access to specific MAC addresses, while Whitelist allows connections only to trusted devices.
To set up filtering, go to the section Wireless Filter or MAC FilteringAdd the intruder's MAC address to the blocked list and activate the rule. However, a more secure method is to change the WiFi network password. Changing the password will disconnect all devices, and you'll only have to reconnect your own devices, entering the new security key.
☑️ WiFi Security Checklist
It is also recommended to disable the function WPS (Wi-Fi Protected Setup). Despite the convenience of connecting without entering a password, this technology has vulnerabilities that allow attackers to recover the PIN code and access the network even with a complex password. Disabling WPS closes this loophole.
⚠️ Attention: Enabling "Allow List" mode is the highest level of protection. In this mode, no new device will be able to connect to the network, even if it knows the password, until you manually add its MAC address to the allowed list in the router settings.
Additional measures to enhance wireless network security
Network security isn't limited to changing passwords. Updating your router's firmware is also crucial. Manufacturers regularly release updates to patch security holes. Check for new software versions in the section System Tools or Administration.
Use a guest network for visitors. Most modern routers allow you to create a separate access point with isolated access. Guests will be able to use the internet, but won't have access to your shared folders, printers, or other devices on the main network. This significantly reduces the risk.
Remember that security is a process, not a one-time action. Regularly checking your client list and updating your software will ensure a stable and fast internet connection, protecting your personal data from prying eyes.
Can my neighbor steal my WiFi if I changed the password?
If the password is complex (long, containing symbols and numbers) and you've disabled WPS, a brute-force attack will take hundreds of years. However, if the password has been previously compromised or shared, changing the password is mandatory. Also, make sure your devices are free of viruses that could leak saved passwords.
Why does the device list show "Unknown"?
This means the device isn't broadcasting its hostname or the router can't recognize it correctly. Smart home devices, IoT gadgets, or devices with MAC address randomization enabled often display this way. In these cases, rely solely on the MAC address.
Does the number of connected devices affect internet speed?
Yes, the bandwidth is shared among all active users. If someone is downloading files or watching 4K videos, your computer's speed may drop significantly. Blocking unnecessary devices will restore your full plan speed.
What should I do if I can't access my router settings?
Check that you're connected to the correct WiFi network. Try a different browser or incognito mode. If nothing helps, the settings may have been changed previously and you'll need to reset them using the Reset button on the device.