A sudden drop in internet speed is the first warning sign that makes you think about your home network security. Often, the cause isn't a provider equipment failure, but rather unauthorized connections from third-party devices to your access point. Connection monitoring Allows you to quickly identify "uninvited guests" and block their access, restoring stable network operation.
There are several proven ways to see how many Wi-Fi users are currently online. You can use built-in router web interfaces, specialized PC programs, or mobile apps for smartphones. The method you choose depends on your router model and how easy it is to access the admin panel.
In this article, we will examine in detail the algorithms of actions for equipment of popular brands, such as TP-Link, Asus, Keenetic And MikroTikYou'll also learn the signs of a password breach and how to configure your security system to prevent future traffic theft.
⚠️ Please note: Router web control panel interfaces may differ depending on the firmware version. The layout of tabs and menu item names are sometimes changed by manufacturers when updating the software.
Primary diagnostics: signs of outside interference
Before resorting to complex analysis tools, it's worth paying attention to indirect indicators of network compromise. Reduced throughput Bandwidth is the most obvious symptom, especially if you're not downloading large files or streaming in high definition. If the router's lights are flashing rapidly even when all your devices are off, this is cause for concern.
Another sign may be an inability to connect to the local network or IP address conflicts. When too many clients appear on the network, the router may stop assigning addresses to new devices or reset existing devices. LAN/WLAN indicators on the device's body begin to switch randomly, signaling high data exchange activity.
For a quick check, you can use the command line in the operating system. WindowsBy entering the command arp -a, you'll get a list of all IP addresses with which your computer communicated on the local network. This won't provide a complete picture of all connections to the router, but it will help identify obvious anomalies in the number of known nodes.
Checking connections via the router's web interface
The most reliable and accurate way to find out who is using your Wi-Fi is to log into your router's administrative panel. To do this, you need to know the gateway IP address (usually 192.168.0.1 or 192.168.1.1) and administrator credentials. In your browser, enter the address in the address bar and log in.
Depending on the manufacturer, the information you're looking for may be located in different sections. For most models, these are tabs. Wireless (Wireless network), Status (Status) or Client List (Client List) - This displays a table with the MAC addresses, IP addresses, and names of connected devices.
☑️ Router security check
If you see a device you can't identify, don't panic. Sometimes older phones, smart plugs, or TVs may have obscure names in the system. MAC address — This is a unique identifier for a network card, which can be compared with the stickers on the casings of your gadgets.
What should I do if I forgot my admin password?
If you've changed your router's password and forgotten it, the only solution is to reset it to factory settings. To do this, press the Reset button on the device (usually recessed) and hold it for 10-15 seconds. After this, the router will reset to the default login and password listed on the sticker on the bottom, but you'll have to reconfigure all your network settings.
Client analysis on TP-Link and Asus routers
Brand routers TP-Link have a fairly logical menu structure. After logging in, find the item in the left or top menu Wireless (Wireless Mode) and then select Wireless Statistics (Wireless Statistics) - This displays a list of all active MAC addresses and their active times.
In new interfaces such as Tether or TP-Link Cloud, information is even more easily accessible. The main page of the status bar often displays a number indicating the number of connected clients. By clicking on it, you can view detailed information and even block the device with one click using the Blacklist.
At routers Asus the situation is similar, but the interface is called ASUSWRTThe main network map in the center of the screen usually displays all connected devices as icons. By going to the tab Net -> Network map -> Clients, you'll see the full list. Here you can not only view the data but also limit the speed or completely disable the offender.
| Router brand | Menu section | Submenu | Lock function |
|---|---|---|---|
| TP-Link | Wireless | Wireless Statistics | Enable / Disable |
| Asus | Network Map | Clients | Block |
| Keenetic | Client list | All devices | Deny access |
| MikroTik | Wireless | Registration | Disconnect |
Network monitoring on Keenetic and MikroTik devices
Equipment Keenetic (formerly ZyXEL) is renowned for its user-friendly KeenOS interface. The "Client List" section is immediately visible on the web configurator's main page. Here, devices are sorted by type (computers, mobile devices, multimedia), making identification much easier. You can click on any device to view a detailed connection history.
For more advanced users using MikroTik, the process is a bit more complicated due to the extensive functionality of RouterOS. You need to go to the menu Wireless and open the tab Registration. All associated stations are displayed here. The tab is also useful for viewing the overall picture. Interfaces, where you can see traffic activity in real time.
MAC address filtering MikroTik allows you to create complex access rules. You can configure a script that will automatically disable devices not whitelisted. This requires some knowledge, but provides maximum network perimeter protection.
Using mobile apps and network scanners
If access to a computer is difficult, smartphones come to the rescue. There are many scanner apps for Android And iOS, which allow you to scan a network and identify all its inhabitants. Popular utilities such as Fing, Network Scanner or WiFi Analyzer, show not only the IP and MAC, but also the device manufacturer (for example, Apple, Samsung, Intel).
These programs work simply: you connect your phone to Wi-Fi, start a scan, and the app sends requests to all addresses in the subnet. In response, the devices provide their IDs. This allows you to quickly create a network map without accessing the router's settings.
However, it's important to remember that mobile apps view the network from the client's perspective. They may not show devices that are in sleep mode and unresponsive, or those hidden by router security settings. Therefore, it's best to double-check app data through the admin panel.
⚠️ Note: Some antivirus programs or firewalls on computers may block requests from network scanners. If the application shows fewer devices than you actually have, try temporarily disabling protection or using a different scanning method.
Methods of protection and blocking uninvited guests
Once you've identified the intruder, you need to take immediate action. The easiest way is to change your Wi-Fi password. Changing the security key will disable all devices, and you'll only have to reconnect your own devices using the new password. This is guaranteed to eliminate all rogue users.
A more flexible method is to use MAC filteringYou can enable a whitelist (Allow List) in your router settings, which only includes the MAC addresses of your devices. Anyone else, even with the password, will be unable to connect. This is the most reliable, albeit more labor-intensive, method of protection.
It is also recommended to disable the function WPS (Wi-Fi Protected Setup). This technology is designed to simplify connections, but it often contains vulnerabilities that allow attackers to brute-force passwords in a matter of hours. Make sure your wireless network settings are encrypted. WPA2-PSK or WPA3.
Frequently Asked Questions (FAQ)
Can my neighbor steal my internet if I changed my password?
If you've changed your password to a complex one (containing letters, numbers, and special characters) and are using modern WPA2/WPA3 encryption, it's virtually impossible to brute-force it within a reasonable amount of time. However, if your neighbor has physical access to your router or has previously connected via WPS, it's still theoretically possible. The best protection is to regularly change the key and disable WPS.
Does the number of connected devices affect internet speed?
Yes, the connection bandwidth is shared among all active users. If one of the connected devices (yours or someone else's) starts downloading large files or watching 4K videos, the speed on other devices will inevitably drop. The router also has a limit on the number of simultaneous connections, and if this limit is exceeded, the network may become unstable.
How to find out the device name by MAC address?
The router's web interface or scanner apps often automatically identify the device manufacturer based on the first six characters of the MAC address (OUI). However, the device itself provides the exact name (e.g., "iPhone-Ivan") upon connection. If the list simply shows "Unknown," try viewing the list when the device is actively using the network.
Is it safe to use programs to hack your neighbors' Wi-Fi?
Using such programs is not only illegal (it violates the law on unauthorized access to computer information), but also dangerous. Viruses and Trojans that steal your personal data are often distributed under the guise of "hacker tools." Furthermore, such programs can use your computer as a host for attacks on other networks without your knowledge.