How to see who is connected to your Wi-Fi router

Slow page loading speeds and unstable wireless network performance often cause confusion among home internet users. You pay for a plan that guarantees high speed, but HD video lags, and files take forever to download. One of the most common causes of this is unauthorized access to your access point.

Neighbors who “forgot” the password, or more advanced users who hacked WPA2 encryption, can use your traffic for years. This not only steals resources but also poses a direct threat to the security of personal data stored on computers and smartphones within the local network. Therefore, regular monitoring of active clients is a must for any home network administrator.

Fortunately, modern routers, whether budget models or high-end gaming systems, have built-in tools for monitoring connections. You don't need to be a network engineer or install complex software to get a complete list of all MAC addresses, which are currently live. All you need is access to your router's control panel and know where to find the information you need.

In this article, we'll take a detailed look at universal verification methods, examine the interfaces of popular hardware manufacturers, and learn how to distinguish system devices from third-party gadgets. You'll understand how to quickly block an intruder and what steps to take to prevent future intrusions.

Symptoms of the presence of foreign devices on the network

Before messing with your equipment settings, it's worth paying attention to indirect signs of channel overload. If you notice that the indicator Wi-Fi If the light on your router is flashing rapidly, even though you're not downloading anything, it could indicate background activity from other devices.

Another warning sign is a sudden change in your main computer's IP address or the inability to connect to a printer over the network. Sometimes attackers use specialized port scanning utilities, which can disrupt the operating system's network services.

⚠️ Please note: Some modern operating systems and smart gadgets (TVs, vacuum cleaners) may consume background data for updates. Don't rush to blame your neighbors until you've checked the list of processes on your devices.

The most reliable diagnostic method is to compare the number of known devices with the actual number of connections in the admin panel. If you have one laptop and two smartphones in your home, and the router sees 15 active clients, the problem is clearly not related to background Windows updates.

It's also worth paying attention to the response speed of the router interface. If the web control panel opens with a significant delay even over a wired connection, this may indicate that CPU The router is busy processing other people's requests.

A universal method of checking via a web interface

The most reliable method of control is to access the router's control panel via a browser. This method works on 99% of models, regardless of manufacturer, whether it's an older device or the latest model with support. Wi-Fi 6First, you need to find out the gateway's IP address, which is usually located on a sticker on the bottom of the case.

Enter the address (usually it is 192.168.0.1 or 192.168.1.1) in the browser's address bar. The system will ask for your login and password. If you've never changed them, use the default information printed on the same sticker, or a combination admin/admin.

After authorization, the interface may look different, but the logic remains the same. Find the section related to your wireless network status. It may be called "Status," "Network Map," "Clients," or "Connection List."

This section displays a table with all active connections. Here you'll see not only IP and MAC addresses, but also the connection type (wired or wireless). This is key for identifying "friends" and "foes."

Instructions for TP-Link and ASUS routers

TP-Link routers, especially newer models with blue or green interfaces, have a very clear layout. After logging in, look at the side menu or the central network map. You're looking for the section Wireless (Wireless mode) or Basic (Basic settings).

Inside, find the item Wireless Statistics (Wireless Statistics). This displays a table where each row corresponds to a connected device. You'll see columns for the MAC address, current status, and connection time.

For ASUS routers with firmware ASUSWRT The situation is similar. On the main page ("Network Map"), the "Clients" section is often immediately visible. Clicking on the number representing the number of connections opens a detailed window. Here, you can not only see the list but also instantly disconnect any device by clicking the cross or lock icon.

⚠️ Note: Firmware interfaces are subject to update. If you don't find the exact menu name, look for synonyms: "List," "Status," or "Connected Devices." The menu structure isn't always linear.

It's important to pay attention to the "Type" or "Interface" column. If the device is connected via a LAN port, and you know all your gadgets are connected via the air, it means someone has plugged a cable into a free port on the router or is using PLC adapters.

The "MAC Address Filtering" feature is often used to block access on these models. You copy the offending address from the statistics list and add it to the blacklist in the corresponding section of the wireless network.

Monitoring Features on Keenetic and D-Link

Routers Keenetic (formerly ZyXEL) are renowned for their advanced operating system KeeneticOSMonitoring is implemented in a highly convenient manner here. The main "System Monitor" page features a "Client List" section. It updates in real time without the need to refresh the page.

By clicking on any device in the list, you'll get comprehensive information: hostname, network card manufacturer, IP address lease time, and current data transfer speed. This allows you to instantly identify the "parasite" downloading torrents.

D-Link devices also provide convenient access to statistics. In the menu Status -> Device Info -> Wireless There is a button called "Station" or "Clients." Clicking on it opens a pop-up window with a list of all SSID and stations connected to them.

What to do if the device is hidden?

Some anonymizing programs can mask the device name, displaying it as "Unknown." In this case, rely solely on the MAC address and network card manufacturer (the first six characters of the address).

What's special about D-Link and Keenetic is that they allow you to not only block but also limit the speed for specific clients directly from this list. This is a useful feature if you want to temporarily curb a child's 4K video consumption instead of completely blocking it.

Please remember that after changing security settings (for example, adding to the blacklist), you must click the "Save" or "Apply" button, otherwise the router will not apply the new traffic filtering rules.

Identifying devices by MAC address

The most difficult part for a beginner is to understand what device is hidden behind a set of numbers and letters like A4:5E:60:C2:11:BBIn the router's client list, names may appear incorrectly (for example, "android-12345" or "IPhone"). To accurately identify the device, check the manufacturer.

The first three pairs of characters of a MAC address are a unique manufacturer identifier (OUI). Knowing it, you can understand what kind of device it is: a Samsung phone, an Intel network card, or a Xiaomi camera.

There are many online services for decoding, but often it is enough to simply know the main brands. For example, addresses starting with 00:1E:C2, are owned by Apple, and B8:27:EB — it's almost always Raspberry Pi.

To make it easier to keep track, create a table of your devices. Write down the MAC addresses of all your home gadgets in a notebook. It only takes 10 minutes, but it will save you hours of frustration in the future when checking your network.

If you see a device with a prefix in your client list that doesn't match any of your devices, this is cause for concern. This is especially true if there are multiple such devices and they are active at night.

Methods of protection and blocking uninvited guests

Once you've identified the intruder, you need to block them. The easiest way is to change your Wi-Fi password. This will disconnect all users, and you'll have to reconnect your devices. It's drastic, but effective.

A more flexible method is to use MAC filteringYou can configure your router to allow only devices on the "White List" to connect to the network. All others, even with the password, will be blocked from accessing the internet.

It is also recommended to disable the function WPSThis is a simplified connection technology with known vulnerabilities. While it's active, a Wi-Fi password could theoretically be brute-forced in a matter of hours.

⚠️ Important: When enabling MAC address filtering, make sure your current computer is on the allowed list. Otherwise, you will block yourself and lose access to your router settings.

For maximum security, use encryption. WPA2-PSK (AES) or the newest WPA3Old WEP and WPA (TKIP) protocols can be cracked programmatically in minutes by any schoolchild with a smartphone.

Frequently Asked Questions (FAQ)

Can my neighbor see what websites I visit if he's connected to my Wi-Fi?

Simply being connected to the same network doesn't automatically grant access to your browser history or the contents of your instant messaging conversations if HTTPS encryption is used. However, an experienced user within your local network could attempt to launch a traffic sniffer to intercept unencrypted data. Therefore, having someone else's device is always a risk.

Why does the client list show a device named "Unknown" or "null"?

This is normal for some IoT devices (smart plugs, lamps, old printers) that don't transmit their network name (hostname) when connecting. The router sees their MAC address but doesn't know how to name them. Use the first digits of the MAC address to determine the manufacturer's identity.

Can a hacker bypass MAC address blocking?

Yes, MAC addresses are easy to spoof (clone). If an attacker sees the MAC address of your authorized laptop on the air, they can change their own address to match. Therefore, the most secure solution is to use a complex WPA2/WPA3 password and hide the network name (SSID) if you don't use it frequently.

Does the number of connected devices affect internet speed?

Absolutely. The Wi-Fi channel is shared among all active clients. If one user is downloading large files or watching a 4K movie, others may not have enough bandwidth, even if their internet plan is very fast. The router is forced to switch between devices, creating latency.

How often should I check my connection list?

It's enough to do this once a month or whenever you notice any unusual network behavior. If you live in a densely populated area where neighbors are within 5 meters, you should check more frequently, especially after evening hours when everyone else is home.