How to check who is connected to a Keenetic Wi-Fi router

In the age of ubiquitous digital presence, home network security has ceased to be the preserve of geeks and has become a necessity for every user. Slow internet speeds or unexpectedly low bandwidth often indicate that unauthorized access to your wireless network may have occurred. Equipment owners Keenetic are in a better position because the firmware of these routers has some of the most advanced monitoring and security tools on the market.

Understanding that, How to check who is connected to a Keenetic Wi-Fi router, allows you to not only identify illegal users but also promptly block their access. The modern interfaces of the KeeneticOS operating system provide detailed statistics in real time, displaying not only IP addresses but also MAC addresses of devices, as well as their activity. This gives you complete control over which devices are consuming your bandwidth right now.

In this article, we'll take a detailed look at all available network auditing methods, from a quick scan via the web interface to using specialized utilities. We'll cover how to distinguish your devices from others, which security settings should be changed immediately, and how to set up automatic blocking of unwanted clients. It is important to know that KeeneticOS allows you to block devices even without changing the Wi-Fi password using the "Access List" feature.

Visual analysis of the client list in the web interface

The easiest and fastest way to find out who is using your Wi-Fi is to log into your router's admin panel. To do this, enter the device's IP address (by default, this is usually 192.168.1.1 or 192.168.0.1) in the browser's address bar. After logging in, you'll be taken to the main page, which often already displays a general network map, but for a detailed analysis, you'll need to drill down further.

Go to the menu Client list (often found in the "My Networks and Wi-Fi" section or as a separate sidebar item in newer versions of KeeneticOS). A table of all active connections is displayed here. Unlike cheaper routers, Zyxel Keenetic They don't just show a dry list of IP addresses, but instead try to determine the device type and manufacturer based on the MAC address. This significantly simplifies identification.

Pay attention to the table columns: hostname, IP address, MAC address, and connection interface (Wi-Fi or Ethernet). If you see a device named "Unknown" or from a manufacturer you don't know (for example, a smartphone or laptop you don't recognize), this is cause for concern. It's also worth paying attention to the IP address lease time—if the device is currently active, it will appear in the list.

Important: Don't panic if you see an unfamiliar name. Many modern gadgets (smart light bulbs, sockets, TVs) may have complex factory names that the user may not remember. Always check the MAC address on the device itself.

For a more in-depth analysis, you can click on a specific device in the list. The system will offer to assign an IP address (static DHCP) to it or, conversely, deny access. The Keenetic web interface allows you to manage each client individually, without rebooting the router or disconnecting from other users.

Using the Keenetic mobile app

For users who prefer to manage their network from a smartphone, Keenetic has developed an excellent mobile app. It's available for iOS and Android platforms and allows for remote network monitoring if the KeenDNS cloud service or WAN access is configured. This is a convenient way to Check who is connected to the Keenetic Wi-Fi router, while outside the home.

The app's interface is as simple as possible. The main screen displays a diagram of your network: the internet center, connected devices, and connection status. Tapping any device icon opens a detailed page. Here you can see the current connection speed, Wi-Fi signal quality (for wireless clients), and activity history.

One of the app's key features is the instant blocking feature. If you notice suspicious activity, simply click the "Block" button or toggle the access switch. The device will immediately lose connection to the router, even if the Wi-Fi password remains the same. This is achieved through MAC address filtering.

⚠️ Attention: Remote control features via the Keenetic cloud require an active subscription or properly configured DNS. Make sure your account is linked to your router, otherwise remote access may be limited to your local network.

The app also allows you to create guest networks. If you frequently have friends over, it's better to give them access to a separate Wi-Fi connection with a limited speed than to share your main password. This can be set up in the app in just a few taps, increasing the overall security of your main network.

Detailed diagnostics via command line and Telnet

For advanced users and system administrators, Keenetic routers provide access to the management console via Telnet or SSH. This allows access to raw network status data, which isn't always displayed in the graphical interface. To use this method, you must first enable the "Telnet Server" component in "Management" -> "System Settings."

After activation, you can connect to the router from your computer using the PuTTY program or the built-in terminal. Command show ip dhcp binding will display the current IP address lease table. This is an honest list of all devices that have received an address from the router. Here you will see the MAC address, IP address, and lease expiration time.

Keenetic:~ # show ip dhcp binding
Binding from pool LAN
192.168.1.10 aa:bb:cc:11:22:33 86400 sec
192.168.1.15 11:22:33:44:55:66 43200 sec

Even more detailed information can be obtained through the command show bridge port or view the ARP table with the command show ip arpThe ARP table shows the mapping of IP addresses to physical MAC addresses at the data link layer. If a device is connected but has no IP address (for example, a static IP is manually configured on the client outside the DHCP range), it may still appear in the ARP table if packets are being exchanged.

Using the console requires caution. Entering commands incorrectly can lead to network instability. However, it's an indispensable tool for diagnosing "invisible" clients that hide behind the web interface. Keenetic It is based on Linux, so many standard Linux commands work here or have their equivalents.

How to enable Telnet on Keenetic?

To enable it, go to the "System" -> "System Settings" menu. Find the "Access" section and check the "Allow Telnet access" box. Be sure to save the settings. Access will now be allowed on port 23.

Analysis of logs and event logs

The event logs (System Log) are your router's "black box." They record almost everything that happens to the device: new client connections, admin login attempts, and configuration changes. To check the connection history, go to the Diagnostics -> Magazine.

In the logs you should look for entries like DHCP: Assign or Wi-Fi: AssociationThey indicate that a new device has successfully requested an IP address or attempted to connect to a wireless access point. Unlike the current list of clients, logs show the history: who connected yesterday, last night, or a week ago.

However, reading logs can be difficult due to the large volume of technical information. To filter useful data, you can use keyword searches, such as the MAC address of a suspicious device. If you see frequent connection attempts from an unfamiliar MAC address, this is a clear sign that someone is trying to brute-force a password or is using a saved network.

For continuous monitoring, you can configure logs to be sent to a remote server (Syslog), if supported by your firmware version. This will save event history even after a router reboot, as the local log buffer has a limited capacity.

Methods of blocking and protecting the network

Once you have found out, Who is connected to the Keenetic WiFi router?If you detect an intruder, you must take immediate action. The most effective method isn't simply changing the password (which would force you to reconnect all your devices), but using the Blacklist. In Keenetic terminology, this is often called MAC address-based access blocking.

Find the intruder in the client list and select "Deny." From this point on, the router will ignore any connection requests from that specific MAC address, even if the intruder knows the correct Wi-Fi password. This is a secure method, as the MAC address is the unique identifier of a network interface.

However, it's worth remembering that a MAC address can be spoofed (cloned) on a computer with the right knowledge. Therefore, if you encounter a targeted attack, the best measure is to change the encryption type to WPA2/WPA3 and setting a complex password. Keenetic supports modern encryption standards that are virtually impossible to crack by brute-force attacks.

⚠️ Attention: When blocking by MAC address, be careful: if you accidentally block your own device, you will have to connect to the router via an Ethernet cable or reset the settings using the Reset button to regain access.

It's also recommended to disable WPS (Wi-Fi Protected Setup). While push-button connection is convenient, this protocol has known vulnerabilities that make it relatively easy to recover the network password. In Keenetic routers, this feature can be completely disabled in the wireless network settings.

Setting up filtering and creating a secure environment

To prevent future intrusions, configure a whitelist. This mode allows only devices whose MAC addresses are on the allowed list to connect to the network. Anyone else, even with the password, will be blocked. This is the highest level of security, suitable for offices or homes with a constant number of users.

You can enable filtering in the Wi-Fi settings. Select "Allow only listed" (or equivalent in your KeeneticOS version) and add the MAC addresses of all your phones, laptops, and TV boxes. New guests will not be able to connect until you manually add them to the list.

Don't forget to update your router's firmware regularly. Keenetic frequently releases updates that patch security holes and improve stability. You can set up automatic update checks so your router will always be up-to-date.

Using a guest network segment is another important consideration. Designate a separate SSID (network name) for guests and smart devices (IoT). Smart bulbs and cheap Chinese gadgets often have weak security and can become an entry point for hackers into your main network. By isolating them, you'll protect your personal data on computers and smartphones.

Frequently Asked Questions (FAQ)

Can my neighbor see my files if he is connected to Wi-Fi?

Simply being connected to Wi-Fi doesn't automatically grant access to files on your devices. However, if you have shared folders (SMB, FTP) on your local network, either without a password or with a simple password, an attacker could theoretically attempt to gain access. It's recommended to use the "Public" network profile on your PC and disable network discovery for unknown devices.

Why does the Keenetic client list display a device named "android-..."?

This is the default name that many Android smartphones and tablets assign to themselves when connecting to a new network. To identify the phone, look at the MAC address (the first six characters indicate the manufacturer, such as Samsung or Xiaomi) or temporarily disable Wi-Fi on your devices and see if the client disappears from the list.

Will my internet speed decrease if I connect many devices to my router?

Yes, the channel's bandwidth is divided among all active users. If one of the connected devices starts downloading large files or watching 4K video, the speed on other devices may drop. Keenetic routers have a traffic prioritization feature, but the physical bandwidth limit of the provider remains unchanged.

How do I know who is connected via cable (LAN) and who is connected via Wi-Fi?

In the Keenetic web interface, the client list has an "Interface" column or a connection icon. Wired devices are typically indicated by a computer icon with a cable or are labeled as Bridge / Ethernet, and wireless ones - with an antenna icon or Wi-FiYou can also physically disconnect the cable from the suspicious port and see if the device disappears from the list.

What should I do if I can't access my router settings?

Make sure you are connected to this router's network. Check the IP address in the network adapter settings (default gateway). If the default 192.168.1.1 or 192.168.0.1 If the device isn't working, the address may have been changed previously. As a last resort, a factory reset using the Reset button on the device (hold for 10-15 seconds) may help.