Who's using my Wi-Fi: How to check connected devices and protect yourself from prying eyes

Have you noticed your internet has slowed down and your data is running out suspiciously quickly? Perhaps someone else is accessing your Wi-Fi. In this article, we'll look at how check the list of connected devices to your router, identify unfamiliar devices, and block them. These methods are suitable for all router models, from budget ones TP-Link TL-WR840N to the flagship ASUS RT-AX88U.

Whether you use the default password from your ISP or create your own, there's always a risk of your network being compromised. Neighbors, guests, or even hackers can connect to your Wi-Fi if it's not secure enough. We'll show you how. detect hidden connections that are not displayed in the router's web interface, and what to do if you find a suspicious device.

Why is it important to monitor Wi-Fi connections?

Every extra gadget on your network doesn't just "steal" traffic—it creates real risks:

• 📉 Speed ​​dropThe more devices, the greater the load on the channel. This is especially noticeable when watching 4K videos or playing online games.
• 🔓 Data leakPasswords, browser history, and even banking information can be intercepted through your Wi-Fi if the network is not secure.
• 💰 Unauthorized purchasesFraudsters can use your IP address for fraudulent activities, from online purchases to registration on dubious websites.
• 🚨 Legal issuesIf pirated content is distributed or a cyberattack occurs over your Wi-Fi, you will be held responsible.

According to data Kaspersky LabMore than 30% of home networks have vulnerabilities that allow connection without a password. Yet, 60% of users never check the list of devices on their network. Meanwhile, even a "forgotten" smartphone from a guest who connected a year ago can become a backdoor for hackers.

Method 1: Viewing via the router's web interface

The most reliable method is to access your router's control panel. The instructions are the same for most models, but the menu paths may vary slightly.

1. Open your browser and type in the address bar 192.168.0.1 or 192.168.1.1 (the exact address is indicated on the router sticker).
2. Enter your login and password (usually by default admin/admin or admin/password).
3. Go to the device list section. For popular models, the paths are as follows:
   • TP-Link: Wireless Mode → Wireless Mode Statistics
   • ASUS: Network Map → Devices
   • Keenetic: System Monitor → Connected Devices
   • Zyxel: Wi-Fi Network → Client List

In the table you will see:

Please pay attention to devices with unknown MAC addresses or suspicious names like unknown, clientGadgets connected outside of normal working hours (for example, at night when everyone is asleep) should also raise concerns.

Method 2: Mobile apps for network analysis

If you're too lazy to access your router settings or don't have access, use specialized utilities. They scan your network and display all connected devices directly from your smartphone.

• 📱 Fing (Android/iOS) — identifies the device manufacturer by MAC address, shows open ports.
• 🔍 NetScan (Android) - saves scan history, marks new devices.
• 🛡️ WiFi Guard (Android) - Sends notifications when unfamiliar gadgets appear.
• 🍎 Network Analyzer (iOS) - visualizes the network as a diagram, showing the speed of each device.

Example of working with Fing:

1. Install the application and open it.
2. Click "Scan" - in 10-20 seconds a list of devices will appear.
3. Tap any item to see details: MAC, manufacturer, IP.
4. Unknown devices can be added to the blacklist directly from the app (if the router supports this feature).

How to trick scanner apps?

Some devices (for example, those with a spoofed MAC address or a VPN) can masquerade as legitimate. If you see "your" device online but it's turned off, that's a reason to check.

The advantage of these apps is that they work even if you don't have access to the router (for example, on a guest network). However, they can't block devices—they only notify you of their presence.

Method 3: Windows Command Prompt (Advanced)

If you prefer to work without graphical interfaces, check the network via CMDThis method will show all active connections, including those hidden in the router's web interface.

Open Command Prompt (Win + R → enter cmd → Enter) and execute the commands in order:

arp -a
ping 192.168.0.1 -n 1
arp -a

The first command will show the ARP table (IP and MAC address mapping). After ping The table will update and you will see all active devices. Pay attention to the rows with the type dynamic - these are current connections.

To save the list to a file for analysis, run:

arp -a > wifi_devices.txt

File wifi_devices.txt will appear in the user folder. It can be opened in Notepad and compare MAC addresses with your devices.

Check the MAC address by searching on Google (e.g. "MAC 00:1A:2B vendor")

Disable it through the router's web interface.

Change your Wi-Fi password to a more complex one

Enable MAC address filtering (if supported)-->

Method 4: Checking via macOS or Linux

On computers with macOS or Linux You can also scan the network without third-party programs. Here are the terminal commands:

For macOS:

netstat -r
arp -a

For Linux (Ubuntu/Debian):

sudo apt install nmap
nmap -sn 192.168.0.0/24

Team nmap will scan all IP addresses in your subnet and show:

• 🖥️ Host — device name (if available).
• 🔗 MAC Address — physical address.
• 🌐 Vendor — network adapter manufacturer (Apple, Samsung, Xiaomi, etc.).

If you see devices with vendors like TP-LINK TECHNOLOGIES or Unknown, but you don't have such gadgets—this is a reason to be wary. Especially if they are connected via a protocol WPS, which is known for its vulnerabilities.

Method 5: Analyze traffic using specialized programs

For in-depth diagnostics, use programs that not only display devices but also analyze their activity:

• 📊 Wireshark — intercepts data packets, shows which websites are visited by connected devices.
• 🔍 GlassWire — visualizes traffic in real time, flags suspicious activity.
• 🛡️ Acrylic Wi-Fi — creates a heat map of the network, identifies "parasites".

Example of working with Wireshark:

1. Download and install the program from the official website.
2. Select network interface (Wi-Fi adapter).
3. Start packet capture (Start).
4. After 1-2 minutes, stop capturing and apply the filter. wlan.addr == 00:1A:2B:3C:4D:5E (replace with suspicious MAC).

If the device transmits large amounts of data to unknown IPs or uses non-standard ports (for example, 4444, 3389), this may indicate hacker activity.

Method 6: Checking through your provider (if the router is rented)

If your router is provided by your ISP (for example, Rostelecom, Beeline, MTS), some functions may be blocked. In this case:

1. Call support and ask them to check the list of connected devices.
2. Use your provider's personal account - sometimes there's a "My Network" or "Devices" section.
3. Check if you have this feature enabled. Wi-Fi Security (some providers offer it for free).

Be prepared to tell the operator:

• 🆔 Contract or personal account number.
• 📝 MAC address of the router (indicated on the sticker).
• 🔑 The last digits of the Wi-Fi password (to confirm network ownership).

Method 7: Physical inspection (if nothing helps)

If you suspect that your neighbors or someone else is using your Wi-Fi but can't find the device in the lists, try:

• 🔌 Turn off the router for 5-10 minutesIf an unfamiliar device reappears after being turned on, someone is actively using it.
• 📡 Change Wi-Fi channelIn the router settings, select manual mode and set the channel 1, 6 or 11 (they overlap the least). Some devices lose connection when changing channels.
• 🔄 Change network name (SSID). Add something like this to the end of the title. _NEWOld devices will not connect automatically.

If the unfamiliar device disappears after these steps, it was connected using saved data. If not, someone is deliberately trying to gain access, and action is needed.

What to do if you find a foreign device

Found an unfamiliar gadget online? Follow these steps:

1. Block it by MAC address in the router settings (section MAC filtering or Blacklist).
2. Change your Wi-Fi password complex (at least 12 characters, with numbers and special characters). Example: k7#pL9!vR2$qM4.
3. Disable WPS - This feature allows you to connect without a password, and it is often hacked.
4. Enable guest network for friends and family, and leave the main one only for your own devices.
5. Update your router firmware — Old versions often have vulnerabilities.

If the suspicious device appears again:

• 🔍 Check your router for malware (for example, through Dr.Web CureIt!).
• 🛡️ Install an antivirus with network protection on all your gadgets (for example, Kaspersky Internet Security).
• 📡 Buy a new router - some models (especially older ones) have hard-wired backdoors.

Is it possible to calculate the physical location of a device?

Theoretically yes, but this requires special tools (for example, Wi-Fi triangulation) and multiple access points. This is practically impossible at home.

FAQ: Frequently Asked Questions about Wi-Fi Security

Is it possible to find out what websites a connected device visits?

Yes, but for this you need special programs like Wireshark Or configure your router to log traffic. Regular home routers don't have this feature. You can also redirect all traffic through a proxy server and analyze it there.

⚠️ Attention: Traffic interception may violate privacy laws (Article 138 of the Russian Criminal Code). Use this method for verification purposes only. their own devices.

Why do unfamiliar gadgets with names like "Android-123" appear in the list of devices?

These could be:

• Old phones of guests who once connected to your network.
• Smart devices (lamps, sockets, cameras) that you forgot to set up.
• Neighbors who connected through a WPS vulnerability or weak password.

Check the MAC address using a search engine - it can often be used to identify the manufacturer.

How to protect Wi-Fi from hacking?

Minimum safety measures:

1. Use encryption WPA3 (or WPA2, if WPA3 is not supported).
2. Turn it off WPS And UPnP in the router settings.
3. Change the default password for the router admin panel (admin/admin).
4. Turn on MAC address filtering (although this is not a panacea).
5. Update your router firmware regularly.

For maximum protection, please set up VLAN (virtual networks) or install a separate router for guest access.

Can my neighbor connect to my Wi-Fi if I hide the network name (SSID)?

Hiding the SSID does not protect from the connection! An attacker can:

• See your network in the list of available ones (many programs show hidden networks).
• Intercept data packets and determine the network name.
• Connect manually, knowing the MAC address of the router.

Hiding the SSID only makes it harder for legitimate users to connect, but it doesn't stop hackers.

What to do if your router is hacked and its settings are reset?

If you notice that:

• The Wi-Fi password has changed.
• Unknown forwarding rules have appeared in the router settings (Port Forwarding).
• The router reboots itself or flashes in an unusual way.

Immediately:

1. Reset the router to factory settings (button Reset for 10 seconds).
2. Update the firmware from the manufacturer's official website.
3. Reconfigure your router using complex passwords.
4. Check all connected devices for viruses.

If the problem persists, the router is compromised and should be replaced.