A slow internet connection or intermittent disconnects are often the first warning signs that your home network is being used by unauthorized people. In the age of ubiquitous digitalization, when not only smartphones and laptops but also smart kettles, lamps, and even refrigerators are connected to the internet, traffic control is becoming a matter not only of performance but also of personal data security. You can figure out who's using your internet connection without advanced technical knowledge by simply checking your router's control panel.
There are several ways to monitor activity: from using the router's built-in web interface to installing specialized applications on your phone. Administrative panel Provides the most accurate and detailed information, allowing you not only to see the number of devices but also to block a specific MAC address or limit its speed. Ignoring this aspect can lead to password theft or the use of your channel for illegal activities.
In this article, we'll detail the steps for popular hardware models, explain how to distinguish your printer from someone else's tablet, and explore tools for automatic network scanning. You'll learn how to quickly respond to suspicious activity and reliably protect your home network from unauthorized access.
Using the router's web interface to analyze the network
The most reliable and universal method of checking is to access the router's settings via a browser. To do this, you need to know the gateway IP address, which by default is usually 192.168.0.1 or 192.168.1.1After entering the address in the browser's address bar, the system will ask for your username and password, which are usually found on a sticker on the bottom of the device unless you've changed them yourself.
Interfaces vary significantly between manufacturers, but the operating logic remains the same. Find the section related to the wireless network or connection status. Look for tabs with names like "Wireless," "Status," "Network Map," or "Client List." This is where a table of active connections is displayed in real time.
⚠️ Note: If the default login address doesn't work, check your computer's network card settings. The default gateway address may have been changed by your ISP or the router's previous owner.
Inside the interface, you will see a list of devices sorted by IP or MAC addresses. MAC address — is a unique identifier for a network interface that is virtually impossible to spoof remotely. By comparing the number of rows in the table with the number of devices you have, you can easily identify "extra" connections. Some modern routers even allow you to rename devices directly in the list for convenience.
Instructions for TP-Link and ASUS routers
Equipment brand TP-Link has a fairly clear menu structure that hasn't changed for years. After logging in, go to the left menu and select Wireless (Wireless mode) and then Wireless Statistics (Wireless Statistics). This displays a table where each connected client is assigned a serial number and its MAC address.
For router users ASUS I've had better luck with a more modern interface, especially on models that support AiMesh technology. The main page of the web configurator often displays a visual network map (Network Map). By clicking on the clients icon or going to the section Clients, you'll see a distinction between wired and wireless connections. The system automatically detects the device type, assigning it a smartphone or laptop icon.
- 📱 TP-Link: The Wireless → Wireless Statistics menu shows only currently active connections.
- 💻 ASUS: The Network Map → Clients section provides detailed information, including connection speed and activity time.
- 🔒 Safety: In both cases, you can copy the MAC address of the suspicious gadget for subsequent blocking.
- ⚙️ Update: ASUS has a new firmware update that automatically notifies you of new connections.
It is important to note that in some models TP-Link With the older green interface, statistics may not update in real time. In this case, the "Refresh" button will help. Newer models with a blue Tether interface display data dynamically, allowing you to see how many bytes of traffic each device has transferred.
Checking connections on D-Link and Zyxel Keenetic
Routers D-Link are often used by providers, and their interface may be slightly stripped down, but the basic monitoring functionality is always present. In the web interface (often at 192.168.0.1) you need to go to the section Status (Status) or Wi-Fi → Client list. This displays the current number of connections and a detailed list with MAC addresses.
Devices Zyxel Keenetic KeenOS is renowned for its advanced operating system. Monitoring is brilliantly implemented here: on the main page ("Dashboard"), there's a "My Networks and Wi-Fi" widget. Clicking on the number of connected clients takes you to a list where you can see not only the IP and MAC address of each device, but also the hostname, if broadcast by the device. The system even displays which Wi-Fi standard (2.4 GHz or 5 GHz) the connection is using.
Feature Zyxel The ability to set priorities directly in the client list is a plus. You can prioritize your gaming PC or TV and block access to suspicious devices. This is done through the "Client List" menu → device selection → "Block" or "Restrict" button.
| Manufacturer | Path to the menu | Display feature |
|---|---|---|
| TP-Link | Wireless → Wireless Statistics | Simple MAC address list |
| ASUS | Network Map → Clients | Visual map, device types |
| D-Link | Status / Wi-Fi → Clients | Basic information, often without names |
| Zyxel | Home → My Networks | Detailed information, priority management |
If you use the equipment D-Link DIR series, pay attention to the "Monitoring" tab. It may display a load graph, and sudden spikes in the graph when your devices are turned off are a sure sign that someone is actively downloading files through your channel.
What if the interface is in English?
Use the online translator in your browser (right-click → Translate to Russian) or find the words in the menu: Wireless, Status, Clients, DHCP List.
Mobile apps for network scanning
It's not always possible to sit down at a computer to check your router. Fortunately, modern smartphones allow you to audit your network directly from your phone. There are specialized scanner apps for this purpose that analyze your local network and identify all active nodes. This is especially convenient if you've forgotten your router admin password.
One of the most popular tools is the application FingIt's available for Android and iOS. After running a scan, the program displays a list of all devices on the network, identifying their manufacturer by MAC address (e.g., Apple, Samsung, Intel). You'll immediately see if a device with an unknown vendor appears on the network.
- 📡 Fing: Market leader, shows open ports and response speed.
- 🛡️ Wi-Fi Analyzer: More about channels, but has a client viewing function.
- 🔍 Network Scanner: Simple interface, fast ping of all addresses.
- 📶 Router Check: Specializes in checking the security of router settings.
Another powerful tool is Wi-Fi Analyzer (by VREM Software)Although its primary function is channel load analysis, it can also display who is currently online in the "Device List" tab. The main advantage of mobile apps is that they operate regardless of router model, scanning the network at the ARP and ICMP protocol level.
⚠️ Note: Mobile apps see the network the same way your phone does. If your router hides device names (hostnames) or uses complex client isolation settings, the app may only show MAC addresses without further explanation.
How to identify a device by MAC address
Often in the list of connections we see a set of characters like A4:5E:60:C2:11:99 and we don’t understand what it is: your old tablet, a smart plug, or a neighbor’s laptop. MAC address It consists of two parts: the first three bytes (OUI) identify the manufacturer, and the second three identify the unique device. Knowing the manufacturer allows you to narrow down your search.
To decipher it, you can use online services or simply look at the stickers on the casings of your gadgets. For example, if the address begins with 00:1A:2B, it could be equipment TP-Link, A 3C:5A:B4 often belongs AppleBy comparing the time the device appeared online with the moment your appliances were turned on, you can easily identify it.
If you find a device you can't identify, try the elimination method. Turn off Wi-Fi on all your known devices one by one. The device you're looking for that disappears from the list after you turn it off is the one you're looking for. Write down its MAC address to save time searching for it in the future.
☑️ Identification algorithm
Methods of protection and blocking uninvited guests
Detecting an intruder is only half the battle. The main task is to block their access. The most effective way is to use MAC address filteringIn the router settings (Wireless MAC Filtering section), add the offending device's address to the "Blacklist" (Deny/Block). Once the settings are applied, network access for this device will be blocked, even if it knows the password.
However, a more radical and secure method is to change your Wi-Fi network password. Changing the security key will disable all devices, and you'll only have to reconnect your own devices. It's recommended to use a complex password with mixed uppercase and lowercase letters and numbers to prevent brute-force attacks.
It is also worth checking if the function is enabled WPSThis technology allows you to connect with the push of a button, but it has vulnerabilities. If you don't use WPS connections, it's best to disable this feature in your router settings. This will close one of the loopholes for potential hackers.
⚠️ Please note: After changing your password or enabling MAC address filtering, smart devices (TVs, vacuum cleaners, lamps) may stop working. You will need to reconfigure their Wi-Fi connection through their respective apps.
Common problems and their solutions
Users often encounter a device in the list that they can't find. Sometimes these can be virtual adapters created by antivirus software or virtualization programs, or network printers that only wake up on a schedule. Don't panic ahead of time.
Sometimes, the router displays a device that's physically turned off. This is due to DHCP lease caching. The router "remembers" that an IP address was assigned to this MAC address and displays it in the list, even though the actual connection is no longer active. Clearing the DHCP list or rebooting the router usually solves this problem.
If you see active data transfer to an unknown device and changing the password doesn't help (which can happen if the WPS password has been compromised previously), consider resetting the router to factory settings. This will restore the security configuration to its default state, forcing you to reconfigure the network, but guaranteeing there will be no loopholes.
Why is my device showing as "Unknown"?
The router requests the device's hostname when connecting. If the device doesn't transmit its hostname (a common occurrence with IoT devices or older operating systems), the router marks it as unknown.
How often should I check the list of connected devices?
It's enough to run a test once a month or whenever you notice unusual network behavior (such as a drop in speed or blinking lights). If you have a strong password, the likelihood of frequent intrusions is minimal.
Can my neighbor see my screen via Wi-Fi?
Simply being on your network won't automatically grant your neighbor access to your screen or files if your devices have the "Public" network profile enabled (in Windows) or network discovery disabled. However, the risk of accessing unprotected folders increases.
What should I do if I can't access my router settings?
Try resetting the router using the Reset button (press and hold for 10-15 seconds while the power is on). This will reset the factory password (found on the sticker) and IP address. Keep in mind that this will reset all your internet settings.
Does the number of connected devices affect the speed?
Yes, the Wi-Fi channel is shared among all active users. If one device starts downloading torrents or watching 4K video, the speed on other devices will inevitably drop, even if the internet channel is very broad.
Are scanner apps safe to use?
Yes, popular apps like Fing are safe, as they only read public network information. However, avoid dubious programs that require suspicious permissions or superuser privileges unless absolutely necessary.