In the age of total digitalization, a home network is no longer simply a channel for internet access from a single computer. Today, smartphones, smart TVs, tablets, gaming consoles, and a multitude of devices from the ecosystem are simultaneously connected to the router. smart homeIn such a dense environment, it's easy to lose control over who exactly is consuming your traffic and using your allocated bandwidth.
A sudden drop in internet speed or rapid blinking of the router's lights can indicate more than just a technical issue. Often, the cause is a third-party device that has surreptitiously connected to your access point. Ability to check the list of active clients — This is a basic administrative skill that every owner of a modern digital home should have.
Fortunately, modern router firmware provides fairly transparent monitoring tools. You don't need to be a programmer or have a deep understanding of network protocols to see the real picture. All you need is to know where to look for the necessary information in your equipment's interface and be able to distinguish legitimate devices from potential intruders.
Symptoms of foreign connection and indirect signs
Before tinkering with settings, it's worth paying attention to indirect signs that may indicate the presence of uninvited guests. Users often notice a problem only when it begins to cause significant disruption to their daily internet use.
The first and most obvious sign is a critical drop in data transfer speed. If you're paying for a 100 Mbps plan, but 4K video stops buffering and pages load jerkily, it's time to worry. It's especially suspicious if this happens during hours when your household is least active.
⚠️ Please note: A slowdown doesn't always mean Wi-Fi is being stolen. It could be caused by interference from neighboring routers, an outdated standard, or other issues. 802.11n or overheating of equipment.
The second sign may be strange behavior of the indicators on the router body. The light WLAN Or the wireless network icon may flash frequently and erratically even when you're not downloading files or watching streams. This indicates active data packet exchange, the source of which is unknown.
You should also be wary if your router starts rebooting spontaneously or becomes hotter than usual. A large number of connections puts a strain on the device's processor, which can lead to instability. In such cases, checking the client list becomes a mandatory diagnostic procedure.
Preparing for the test: gaining access to the router
To see the list of connected devices, you need to log in to the router's control panel. This is a web interface that allows you to change security settings, network names, and passwords. It can be accessed through a browser on any device connected to the network.
The first step is to find the IP address of the default gateway. On Windows computers, this can be done via the command line. Click Win + R, enter cmd and press Enter. In the window that opens, enter the command ipconfig and find the line "Default Gateway".
Microsoft Windows [Version 10.0.19045.3693]
(c) 2022 Microsoft Corporation. All rights reserved.
C:\Users\User>ipconfig
Ethernet Ethernet Adapter:
IPv4 address. . . . . . . . . . . : 192.168.1.5
Subnet mask. . . . . . . . . : 255.255.255.0
Default gateway . . . . . . . . : 192.168.1.1
Most often, the router address looks like this 192.168.0.1 or 192.168.1.1Enter this set of numbers into the browser's address bar. If the address was previously changed and you don't remember it, try checking the sticker on the bottom of the device—the default IP address is often listed there.
After entering the address, the system will ask for a login and password. By default, this is usually a combination admin / admin or admin / passwordThe exact details are also indicated on the sticker on the bottom of the case. If you changed the password and forgot it, you will have to reset the settings using the button. Reset.
Interfaces of popular router manufacturers
The location of the client information menu varies depending on the router model and manufacturer. While the interfaces may look different, the logic remains the same. Let's look at where to find this information on devices from the most popular brands.
On routers TP-Link (especially with the new green interface), go to the "Network Map" or "Basic" -> "Wireless" section. This will display a diagram showing the number of active wireless and wired clients. In the older orange interfaces, look for the "DHCP" tab -> "DHCP Client List."
In devices ASUS With ASUSWRT firmware, this information is located on the main page in the center of the screen as a visual network map. You can also access the "Traffic Monitor" or "System Status" sections. These sections display not only names but also IP/MAC addresses.
Routers D-Link (DIR series) often have a "Status" -> "Clients" or "LAN" tab. Some models require you to go to advanced settings to see the full list. Keenetic (Zyxel) offers the most convenient list in the "Client List" section on the main page, where you can immediately block devices.
What if the interface is in English?
If your router has an English interface, look for sections labeled Status, Wireless, DHCP, Client List, Attached Devices, and Network Map. These are usually found in the sidebar or top panel.
Below is a table with sample paths for common models:
| Manufacturer | Menu section | Tab name | Additionally |
|---|---|---|---|
| TP-Link | Basic / Wireless | Wireless Statistics | Shows MAC addresses |
| ASUS | Network Map | Clients (Right) | Detailed statistics |
| D-Link | Status | DHCP Clients | The list needs updating |
| Keenetic | Dashboard | Client list | Can be renamed |
| Tenda | Advanced | DHCP Client List | Basic information |
List Analysis: How to Distinguish Your Devices from Others
Once you've entered the list, you'll see a list of devices. They may be displayed by name (e.g., iPhone-Andrey or LivingRoom-TV) or just like Unknown Device with a set of numbers and letters. The main task is to identify each device.
The most reliable method is to check the MAC addresses. A MAC address is a unique identifier for a network interface that is assigned at the factory. It looks like this: 00:1A:2B:3C:4D:5EThe first three pairs of characters (OUI) indicate the chip manufacturer.
- 📱 Smartphones: They usually have a brand name in their name (Samsung, Apple, Xiaomi). If you have an iPhone, look for the line with Apple in the name.
- 📺 TVs: Often named after their model (eg. LGwebOSTV or
Samsung-6-Series). - 💻 Computers: They can be called
DESKTOP-XYZor have the name specified during Windows/macOS installation. - 🏠 Smart home: Light bulbs and sockets often have a brand name in their name (Tuya, Yeelight, Aqara) or are labeled as
Espressif.
If you see a device with the name "Unknown" or a strange string of characters, don't panic. It could be your printer that has "forgotten" its network name, or an old tablet in sleep mode. Disable Wi-Fi on all your devices one by one and see if the suspicious string disappears from the list.
⚠️ Note: Some modern smartphones (iOS 14+, Android 10+) use the "Private Wi-Fi Address" (Randomized MAC) feature. This means the router may see the same device as a new one each time it reconnects, unless an exception is set.
For precise identification, you can use online MAC address lookup services (OUI Lookup). By entering the first 6 characters of the address, you will find the manufacturer of the network module. If the chip manufacturer does not match the device type (for example, the module Intel in a "smart light bulb"), this is a reason for a deeper analysis.
Mobile applications for network monitoring
Logging into your router's web interface every time is inconvenient, especially if you just need a quick look at who's using your Wi-Fi. There are specialized mobile scanner apps for this purpose, available for Android and iOS. They scan the network and display all active hosts.
One of the most popular and functional tools is the application FingIt doesn't require root access and works very quickly. After running the scan, you'll get a complete list of devices with their IP addresses, MAC addresses, manufacturers, and even their approximate type (phone, PC, IoT).
☑️ Security check via the app
Other useful apps include Network Scanner And IP ToolsThey allow you not only to see connected devices but also to check open ports, ping devices, and determine response speed. This is a great way to conduct a security audit without accessing the router's admin panel.
It's important to understand that these applications see the network just like any other computer. If your router has AP Isolation enabled, the application may not see other devices. Also, some router antivirus programs may block port scanning, considering it suspicious activity.
Network Security: Blocking and Changing Passwords
If you discover someone else's device, you need to act immediately. The simplest, yet most drastic, method is to change your Wi-Fi password. After changing the encryption key, all devices will be disconnected, and you'll have to reconnect your devices. This ensures that the "guest" will no longer be able to access your account.
A more flexible method is filtering by MAC addresses. In the router settings (section Wireless MAC Filtering) you can create a "White List" (Allow List). In this mode, only devices whose MAC addresses you've manually entered will be able to connect to the network. All others, even with the password, will be blocked.
- 🔒 Change password: Use a complex combination of letters and numbers, at least 12 characters. Avoid birthdays and simple words.
- 🚫 Disabling WPS: The WPS function is vulnerable to hacking. If your router has a WPS option in its settings, be sure to disable it.
- 📡 Guest network: Create a separate guest network for friends and family. It's isolated from your main network, where your personal files and printers are located.
Some routers allow you to simply click the "Block" button next to a suspicious device in the client list. This is convenient, but not always reliable: a hacker can change the MAC address of their adapter and try to connect again. Therefore, changing the password and disabling WPS remain the "gold standard" of security.
⚠️ Caution: Be careful when enabling MAC address filtering. If you add your current MAC address to the list but forget to add other devices (such as a laptop or phone), you could block your own network access and lose the ability to manage your router via Wi-Fi.
Frequently Asked Questions (FAQ)
Can my neighbor steal my Wi-Fi if I hide my network name (SSID)?
Hiding the SSID (Broadcast SSID: Disable) isn't foolproof. The network still emits signals, and special programs can easily detect "hidden" networks. This only inconveniences you when connecting new devices, but it won't stop an attacker.
Why do I see more connections in the list of devices than I have gadgets in my hands?
Modern devices often have multiple network interfaces. For example, a single physical router can create multiple virtual hotspots (2.4 GHz and 5 GHz), and a phone may appear twice. Individual connections may also have prefixes like "-2G" or "-5G."
Is it dangerous if someone connects to my network but doesn't download anything?
Yes, it's dangerous. Even in passive mode, an attacker can scan your local network for vulnerabilities, attempt to access shared folders, or use your IP address for illegal activities that the police can trace back to you.
How often should I change my Wi-Fi password?
At home, it's sufficient to change your password every 6-12 months or immediately after you've had a lot of guests over and shared the password with them. If you use a complex password (20+ characters) and have disabled WPS, frequent changes are not necessary.
Can an antivirus program on a computer show who is connected to the router?
The antivirus itself does not show this, but many modern security suites (Kaspersky, ESET, Norton) have “Home Network Protection” or “Network Inspector” modules that visualize connected devices and warn about risks.