How to Check Who's Connected to Your Wi-Fi: All the Methods with Instructions

Have you noticed your internet has slowed down and your data usage is unusually high? Perhaps unauthorized devices have connected to your Wi-Fi. In this article, we'll look into it. All current methods for checking connected users — from standard router functions to specialized programs. You'll learn how to identify "unwanted" devices, even if they hide their names, and what to do if you detect an unauthorized connection.

It doesn't matter what kind of router you have - TP-Link, ASUS, Keenetic or a model from your provider—the instructions will work for most modern devices. And if you're a landlord or office network administrator, here you'll find tips on monitoring connections without accessing the router's settings. Let's start with the simplest method, which works on 90% of routers.

1. Checking via the router's web interface (the most reliable method)

Every router keeps a log of connected devices, and the most accurate way to get this information is to access its control panel. This doesn't require any special software, just a browser and internet access.

Find first Your router's IP address. Usually it is 192.168.0.1 or 192.168.1.1, but may vary depending on the model. You can find it:

  • 📱 On Android: Settings → Wi-Fi → (click on your network) → Find IP
  • 💻 On Windows: run the command ipconfig V Command line and find the line Main gateway
  • 🍎 On MacOS: System Preferences → Network → Advanced → TCP/IP

Next, enter this IP address into the browser's address bar. You'll be asked to enter your username and password—if you haven't changed them, the default combinations are usually listed on the router's sticker (most often admin/admin or admin/password). After logging in, look for the section with connected devices. Depending on the firmware version, it may be called:

Router manufacturerSection in the menuPath (example)
TP-LinkWireless Mode → StatisticsWireless → Wireless Statistics
ASUSNetwork Map → ClientsNetwork Map → Clients
KeeneticList of devicesDevices → Device List
ZyxelWi-Fi Network → ClientsWi-Fi Network → Clients
Rostelecom/MTSLocal Area Network → DHCPLAN → DHCP Clients
⚠️ Note: If you see a device named android-XXXXXX or iPhone-YYYYYY, but you don't recognize it—it's not always a hack. Many gadgets automatically connect to open networks (for example, Amazon Kindle or Google Home). Check the device's MAC address in your smartphone or tablet's settings.

In the list you will see:

  • 🔹 Device name (can be changed by the user)
  • 🔹 MAC address (unique identifier, harder to forge)
  • 🔹 IP address (may change upon reconnection)
  • 🔹 Connection time (helps identify "night guests")
📊 How often do you check your connected devices?
Once a week
Only when the internet is slow
Never checked
I use automatic monitoring

2. Mobile apps for Wi-Fi monitoring

If accessing your router settings is inconvenient, you can use specialized apps. They display all connected devices, and some even identify their type (smartphone, laptop, smart speaker). Here are the top three proven utilities:

  • 📱 Fing (Android/iOS) — scans the network, displays MAC addresses and device manufacturers. Includes a notification feature for new connections.
  • 📱 WiFi Guard (Android) — compares current connections with a "white list" and alerts you to unknown devices.
  • 📱 NetScan (iOS) - Detailed information about each device, including connection history.

How to use (using example) Fing):

  1. Download and install the application from the official store.
  2. Connect to your Wi-Fi network.
  3. Click "Scan" - in 10-20 seconds a list of devices will appear.
  4. Click on any device to see its MAC, manufacturer, and activity history.
⚠️ Attention: Mobile apps only show devices that active at the time of scanningIf the "unnecessary" gadget is disabled, it may not be listed. For complete control, combine it with router verification.

Benefits of the apps:

  • 🔹 No need to remember your router password
  • 🔹 Works even if you don't have access to settings (for example, in the office)
  • 🔹 You can set up notifications about new devices

Check your device's MAC address in your settings|Try disabling it through your router|Change your Wi-Fi password|Enable MAC address filtering-->

3. Windows Command Prompt: Who's Connected to Your Network

If you prefer to work without additional programs, you can use the built-in tools WindowsThis method is suitable for experienced users and allows you to get a list of all devices on the local network, including those that may be hidden in the router's web interface.

Open Command line as administrator and run these commands one by one:

arp -a

nbtstat -a [IP address]

ping -a [IP address]

Transcript:

  • 🔹 arp -a — displays a table of IP and MAC address mappings. Search for unknown MAC addresses.
  • 🔹 nbtstat -a [IP] — tries to get the device name by its IP (does not always work).
  • 🔹 ping -a [IP] — sometimes gives out the host name.

Output example arp -a:

Interface: 192.168.1.100 --- 0x12

Internet Address Physical Address Type

192.168.1.1 aa-bb-cc-dd-ee-ff dynamic ← this is a router

192.168.1.101 11-22-33-44-55-66 dynamic ← unknown device

192.168.1.102 ff-ee-dd-cc-bb-aa dynamic ← your laptop

To identify the manufacturer by MAC address, use the first 6 characters (e.g. aa-bb-cc) and check them through the service MAC Vendor Lookup (for example, on the website Wireshark). This will help you understand whose gadget it is. Apple, Samsung, Xiaomi etc.

How can I hide my device from such checks?

Some advanced users change the MAC address (spoofing) or disable ping responses. However, this doesn't protect against detection through the router, where the device will still be visible via DHCP lease.

4. Testing on MacOS and Linux

Users MacBook or computers with Linux They can also check connected devices without third-party software. Here are the terminal commands:

For MacOS:

netstat -r

arp -a

nmap -sn 192.168.1.0/24

For Linux (Ubuntu, Debian, etc.):

sudo apt install nmap # if not installed

sudo nmap -sn 192.168.1.0/24

sudo arp-scan --localnet

Team nmap scans the entire subnet and shows:

  • 🔹 IP addresses of active devices
  • 🔹 MAC addresses
  • 🔹 Network card manufacturer
  • 🔹 Response time (helps identify devices with poor signal)
⚠️ Attention: Scanning the network using nmap may be blocked by some routers as suspicious activity. If the commands don't work, check the firewall settings on the router (section Security → Firewall).

Output example nmap:

Starting Nmap 7.80 ( https://nmap.org )

Nmap scan report for 192.168.1.1

Host is up (0.0020s latency).

MAC Address: AA:BB:CC:DD:EE:FF (TP-Link Technologies)

Nmap scan report for 192.168.1.101

Host is up (0.045s latency).

MAC Address: 11:22:33:44:55:66 (Unknown) ← suspicious device!

5. Specialized programs for PC

If you need to not only see the connected devices, but also track their activity in real time, it's worth paying attention to desktop utilities. They're suitable for network administrators or anyone who wants to deeply analyze traffic.

ProgramPlatformPeculiaritiesLink (official)
WireSharkWindows, Mac, LinuxAdvanced packet analyzer shows all network trafficwireshark.org
Advanced IP ScannerWindowsScans the network, identifies manufacturers, and allows you to remotely turn off devicesadvanced-ip-scanner.com
Angry IP ScannerWindows, Mac, LinuxQuick scan, export results to CSVangryip.org
SoftPerfect Network ScannerWindowsShows open ports, MAC addresses, NetBIOS namessoftperfect.com

For example, in Advanced IP Scanner enough:

  1. Download and install the program.
  2. Click "Scan" - your IP range will be automatically detected.
  3. In 5-10 seconds, you will receive a list of all devices with their names, MAC addresses, and manufacturers.

Advantages of desktop programs:

  • 🔹 Deeper analysis than mobile apps
  • 🔹 Ability to block devices directly from the interface (in some utilities)
  • 🔹 Connection history and traffic consumption graphs

6. How to identify an "extra" device and what to do with it

You found an unknown gadget on the list—what next? Here's the procedure:

  1. Check your devices: Check the Wi-Fi settings on all your smartphones, tablets, laptops, smartwatches, and speakers. Compare the MAC addresses.
  2. Ask your household: It might be a guest device or a new gadget (for example, Amazon Echo or Roborock).
  3. Look at the connection time: If your device appears at night or when you are not present, this is a clear sign of a hack.
  4. Try disabling it: In the router settings, find the MAC or IP blocking function (section Wireless → MAC Filtering).

If the device is truly foreign:

  • 🔹 Change your Wi-Fi password complex (at least 12 characters, with numbers and special characters).
  • 🔹 Enable WPA3 (if the router supports it) - this is the most secure protocol today.
  • 🔹 Disable WPS - This feature simplifies the connection, but makes the network vulnerable.
  • 🔹 Hide the network name (SSID) - This will not protect against experienced hackers, but it will reduce the number of accidental connections.
⚠️ Attention: If after changing the password an unknown device reappears on the network, this may mean that:
  • 🔹 Your router is infected with malware (you need to reset it to factory settings).
  • 🔹 Someone has physically connected to your router via WPS or LAN port.
  • 🔹 Your provider provides Wi-Fi access to third parties (sometimes this is specified in the contract).

7. Automatic connection monitoring (for advanced users)

If you don't want to manually check your network, you can set up automatic notifications about new devices. The following are suitable for this:

  • 🔹 Routers with support DD-WRT or OpenWRT — allow you to install plugins for monitoring.
  • 🔹 Scripts on Python — You can write a simple script that will scan the network and send notifications by email.
  • 🔹 Cloud services (For example, Unifi Controller for routers Ubiquiti).

Example script on Python for automatic scanning (requires installed python-nmap):

import nmap

import smtplib

nm = nmap.PortScanner()

nm.scan(hosts='192.168.1.0/24', arguments='-sn')

We receive a list of new devices (compare with the previous scan)

new_devices = [host for host in nm.all_hosts() if host not in known_devices]

if new_devices:

message = "New devices detected: " + ", ".join(new_devices)

# Send a notification by email (set up SMTP)

server = smtplib.SMTP('smtp.example.com', 587)

server.sendmail('you@example.com', 'admin@example.com', message)

For routers with DD-WRT you can use a plugin WiFiDog, which:

  • 🔹 Keeps a log of all connections
  • 🔹 Blocks unknown devices
  • 🔹 Sends notifications by email

8. Common mistakes and how to avoid them

When checking connected devices, many people make common mistakes that lead to false positives or missed real threats. Here's what it's not worth doing:

  • 🚫 Ignore devices with "strange" names - For example, esp8266 it could be a smart light bulb, or unknown - a virus.
  • 🚫 Fully trust the device name — it's easy to spoof. Always check the MAC address.
  • 🚫 Scan the network only during the day — Some "guests" connect at night, when traffic is not noticeable.
  • 🚫 Use programs from unverified sources - they may contain viruses or spyware.

Also remember:

  • 🔹 DHCP Client List The router does not show all devices - some may use a static IP.
  • 🔹 MAC filtering is not 100% secure - the MAC address can be spoofed.
  • 🔹 Guest Wi-Fi must be a separate network with limited access to local resources.
⚠️ Attention: Some providers (eg Rostelecom or Beeline) may share your Wi-Fi with third parties through "public networks." Check your contract or call support to disable this feature.
📊 Have you ever found strange devices on your network?
Yes, several times
Yes, but these were the neighbors' devices
No, but I suspected
No, my network is clean.

FAQ: Answers to Frequently Asked Questions

Is it possible to find out what websites a connected device visits?

Yes, but for this you need:

  1. Install firmware on the router that supports traffic monitoring (for example, DD-WRT).
  2. Use programs like WireShark or GlassWire.
  3. Set up traffic redirection through a proxy server.

Standard home routers don't have this feature. Also, remember that intercepting traffic without the user's consent may be illegal.

Why does my own gadget appear in the list of devices multiple times?

It's normal if:

  • You have it turned on Wi-Fi Direct or Hotspot.
  • The device is connected to both 2.4 GHz and 5 GHz simultaneously.
  • Virtual networks are used (for example, Android can create separate connections for VPN).

To avoid confusion, disable unnecessary networks in your gadget settings.

How do I block a device if I don't know its MAC address?

If the device is active, you can block it by IP:

  1. Find the IP in the list of connected devices.
  2. In the router settings, go to Firewall → IP Filtering.
  3. Add a block rule for this IP.

Disadvantage of this method: if the device receives a new IP (for example, after rebooting the router), the blocking will be reset.

Can my neighbor connect to my Wi-Fi if the signal is weak?

Yes, even if you only have 1-2 "bars" of signal. Modern adapters and antennas (for example, Alfa AWUS036ACH) allow you to catch weak nets at distances of up to 1 km. To protect yourself:

  • Use WPA3 instead of WPA2.
  • Turn it off WPS And UPnP.
  • Reduce the signal transmission power in the router settings (if you don’t need a large coverage area).
How can I check if my neighbor is stealing my Wi-Fi via cable?

If someone has physically connected to your router through LAN port:

  1. Check the list of devices in the web interface - such connections are usually marked as Wired.
  2. Disconnect all cables from the router and see if any unknown devices remain.
  3. If your suspicions are confirmed, change the password for the router's web interface and disable unnecessary ports.