It's often frustrating when the internet starts to slow down and pages load slowly. However, the problem isn't always due to provider outages or worn-out equipment. It's quite possible that your wireless network is affected. an uninvited guest joined in, which consumes bandwidth and reduces overall connection speed. Modern technologies make it possible to identify such users fairly quickly if you know where to look.
There are several effective ways to check the list of connected devices, from using specialized apps to a thorough analysis of your router settings. Regardless of the model of your equipment, whether TP-Link, Asus or Keenetic, the detection principle remains similar. It's important to understand that ignoring unauthorized connections can lead not only to traffic theft but also to the leakage of personal data if an attacker gains access to local resources.
In this article, we'll detail the steps for different types of devices and operating systems. You'll learn how to identify your devices in the client list, block offenders, and set up reliable protection to avoid similar situations in the future. Changing your password to a complex and unique one is the first step you should take immediately after discovering unauthorized access.
Signs of an unauthorized connection to the network
Before moving on to technical testing methods, it's worth paying attention to indirect symptoms that may indicate the presence of foreign devices. Users often notice that the router's indicators are behaving strangely. For example, the light WLAN or Wi-Fi The light is actively blinking even when all your devices are turned off or in standby mode. This may indicate background network activity.
Another warning sign is a sharp drop in internet speed. If you're used to downloading files in minutes, but now the process takes hours, you should be wary. This is especially suspicious if it happens at night or when no one is home. Some antivirus programs may also issue warnings about port scanning attempts from within the local network.
- 📉 A sharp decrease in download and upload speed for no apparent reason.
- 💡 Active blinking of wireless indicators when there is no user activity.
- 🔒 Blocking access to router settings or changing the administrator password without your knowledge.
- 📱 Unknown devices appearing in Bluetooth connection lists or network neighborhood.
You shouldn't ignore messages from the router itself. Some modern models, for example, from MikroTik or Ubiquiti, can send notifications via email or mobile app when a new device is connected. If you're receiving such alerts but haven't taken any steps to expand your network, it's a clear reason to check.
⚠️ Warning: If you discover that your router's security settings have been changed (for example, the MAC address filter is disabled or WPS is enabled), this may indicate that an attacker has full control of the device. In this case, a full reset is necessary.
Checking via mobile apps
The fastest and most accessible way to find out who's connected to your Wi-Fi is to use specialized smartphone apps. They scan the network and provide a complete list of active devices, displaying their IP addresses, MAC addresses, and often the manufacturer's names of network cards. This is convenient because it doesn't require a computer connection or knowledge of complex commands.
One of the most popular tools is the application FingOnce installed and launched, it automatically detects your network and begins scanning. The results will show a list of all gadgets: from smartphones and laptops to smart light bulbs and TVs. The app helps identify devices by manufacturer logos, making it easier to find the offending device.
☑️ Security check via the app
Other applications such as WiFi Analyzer or Network Scanner, offer similar functionality. They allow you to not only view a list of clients but also check the signal quality in different parts of your apartment. However, for security purposes, it's important to pay attention to the device's detailed information. If you see a device with a name Unknown or a strange set of characters, this is a reason to take a closer look at it.
- 📲 Fing: Market leader, excellent at identifying device types and operating systems.
- 🔍 Network Analyzer: Provides detailed technical data for each connection.
- 🛡️ WiFi Guard: Specializes in monitoring and alerting about new connections in real time.
If you're using mobile internet (3G/4G), local network scanning won't be possible. Also, some antivirus software on your phone may block port scanning, considering it suspicious activity, so you may need to grant the app the appropriate permissions.
Analysis via the router's web interface
The most reliable information can be obtained by accessing your router settings directly through a web browser. This method is universal and works for any router, regardless of its price or year of manufacture. You will need to know the gateway IP address (usually 192.168.0.1 or 192.168.1.1) and administrator login and password.
After logging into the control panel, find the section responsible for the wireless network or client status. This section has different names depending on the model: Wireless Status, Client List, DHCP Client List or Client listThis is where you'll see a table of all the devices currently receiving an IP address from your router.
Interfaces from different manufacturers have their own characteristics. For example, in routers TP-Link the client list is often found in the menu Wireless -> Wireless Statistics. In devices Asus You need to go to the main network map and click on the icon indicating the number of connected clients. In routers Keenetic This information is available in the "Client List" widget on the main page of the interface.
| Router manufacturer | Section in the menu | Item name | Action |
|---|---|---|---|
| TP-Link | Wireless | Wireless Statistics | View MAC addresses |
| Asus | Network Map | Clients (PC Icon) | MAC blocking |
| D-Link | Status / Device Info | DHCP Client List | View IP leases |
| Keenetic | Home / Client List | List of connections | Access Denied |
| Tenda | Wireless Settings | Wireless Client List | Speed Limit |
⚠️ Note: Firmware interfaces may be updated. If you don't find the specified tab, look for sections with the words "Status," "Statistics," or "Map." In new software versions from MikroTik or Ubiquiti The menu structure may differ from the standard one.
The main advantage of this method is the ability to not only identify the intruder but also block them immediately. Most modern interfaces feature a Block button next to the device's name or the option to add the MAC address to a blacklist. This action instantly disconnects the connection for the selected device.
What to do if you forgot your router password?
If you've changed the administrator password and forgotten it, the only way to access the settings is to perform a factory reset (hard reset). To do this, locate the small hole marked "Reset" on the router body, press it with a paperclip, and hold it there for 10-15 seconds while the power is on. After this, the router will reboot with the factory settings listed on the sticker underneath.
Using the Command Prompt in Windows
For users who prefer to work with a Windows computer, there's a command-line method. It doesn't require installing any additional software and allows you to obtain technical information about your network connections. This method is especially useful when you don't have a smartphone with installed apps on hand.
First, you need to open the command prompt. Press the key combination Win + R, enter cmd and press Enter. In the window that opens, enter a command to display the ARP (Address Resolution Protocol) table, which links IP addresses to the physical MAC addresses of devices on the local network.
arp -aAfter entering the command, the system will display a list of all devices with which your computer has communicated. You'll see IP addresses and their corresponding MAC addresses. However, there's a catch: the list may show not only devices that are currently actively transmitting data, but also those with which you've previously communicated. Therefore, this method requires additional analysis.
To clarify the information, you can use a more powerful utility. nmap, if installed, or the standard command netstat, although it shows more connections than devices. Windows doesn't have a built-in simple command to view DHCP leases from the command line, so the method arp -a remains basic for rapid diagnosis.
- 💻 Open the command prompt via the Start menu or a shortcut
Win+R. - 📝 Enter the command
arp -ato view the address mapping table. - 🔍 Compare the received MAC addresses with the addresses of your known devices (indicated in the Wi-Fi settings of your gadgets).
- ⚠️ Please remember that the list may contain "dead" entries left over from previous connections.
This method is fast, but less informative than logging into the router. You won't be able to see the device name (e.g., "iPhone-Ivan"), only a string of numbers and letters. To identify the device, you'll still have to check the MAC addresses against the labels on the devices or access their settings.
Comparison of detection methods
Each of the methods discussed has its advantages and disadvantages. The choice of method depends on your technical expertise, the availability of certain equipment, and the urgency of the situation. Below is a table to help you determine the best testing option.
| Method | Complexity | Data accuracy | Blocking capability | Required equipment |
|---|---|---|---|---|
| Mobile application | Low | High | Partial (via router) | Smartphone |
| Router web interface | Average | Maximum | Full | PC or Smartphone |
| Command Prompt (CMD) | High | Average | No | Windows PC |
| Router indicators | Low | Low (just a fact) | No | Visual access |
If your goal is simply to quickly check if someone else is online, mobile apps are best. They offer a beautiful and intuitive interface. However, if you're determined to punish the offender and block their access, you'll need to access the router's settings. The command line is for enthusiasts or system administrators without a graphical interface.
Network protection and blocking of intruders
Detecting an intruder is only half the battle. The main goal is to protect your network from repeated intrusion. The most effective method is MAC address filtering. Each network adapter has a unique identifier. In your router settings, you can enable "Whitelist" mode, allowing access only to trusted devices, or "Blacklist" mode, blocking specific addresses.
However, MAC addresses can be spoofed (cloned), so you shouldn't rely solely on them. It's crucial to use a strong encryption protocol. In modern routers, you should choose WPA2-PSK or the newest WPA3WEP and WPA protocols are outdated and can be cracked in minutes even by non-professionals.
The passphrase should be complex: contain letters of various ranges, numbers, and special characters. Avoid obvious combinations like your date of birth or phone number. The password should be at least 12 characters long. It is also recommended to disable the feature. WPS, which is often used for automatic connection, but is a serious security hole.
⚠️ Please note: After changing your password or setting up filters, all your devices will lose connection to the router. You will have to re-enter the new password on each smartphone, laptop, and TV. Be prepared for this process.
Don't forget to update your router firmware regularly. Manufacturers release updates that patch software vulnerabilities. Older versions of the software may contain backdoors that allow hackers to access network management without knowing the Wi-Fi password.
How do I find out my device's MAC address?
On Android: Settings -> About Phone -> General Information (or Status). On iPhone: Settings -> General -> About. On Windows: Command Prompt. ipconfig /all, look for the line "Physical Address." On macOS: System Preferences -> Network -> Wi-Fi -> Advanced -> Hardware.
Can my neighbor use my Wi-Fi without a password?
Yes, if you have an open network (no password) or have WPS enabled and a PIN code. Connecting via QR code is also possible if someone has captured a photo of your screen with the access code. Always use encryption.
Does mining affect Wi-Fi speed?
Yes, if a device mining or downloading torrents is connected to your network, it can completely clog up the channel. Internet speed for other users will drop to practically zero, and ping will increase.
What should I do if my router won't let me access the settings?
Check that the gateway IP address is entered correctly. Make sure the Ethernet cable is connected or you are connected via Wi-Fi. If the administrator password is unknown and the default (admin/admin) password doesn't work, resetting the system using the Reset button will help.