How to check devices connected to a Keenetic WiFi router

Slow internet speeds and intermittent connection drops are the first warning signs that may indicate unauthorized access to your home network. Equipment owners Keenetic often face the need to quickly audit connected clients to ensure the security of their communication channel. Modern operating systems, such as KeeneticOS, provide powerful tools for monitoring traffic in real time, allowing you to instantly identify any “guest”.

Unlike budget models from other manufacturers, this brand's routers feature an advanced network activity logging and visualization system. You'll be able to see more than just a list MAC addresses, but also determine the device type, its network name, and the amount of data transferred. This knowledge is the foundation for building a truly secure home infrastructure, where every byte of traffic is under your control.

In this article, we'll take a detailed look at all the available methods for viewing client lists: via the web interface, mobile app, and even the command line for advanced users. We'll learn how to distinguish system processes from real devices, and also explore methods for restricting access for unwanted nodes. Get ready to dive into the world of network diagnostics, where you become a full-fledged administrator of your digital space.

Using the KeeneticOS web interface for monitoring

The most convenient and informative way to check connected subscribers is to use the built-in web configurator. To get started, open any browser on your computer or smartphone connected to the Internet and go to my.keenetic.net or 192.168.1.1After entering the administrator password, you'll be taken to the main menu, where the "System Monitor" start page often displays basic information about current activity.

However, for a detailed analysis, you should go to the section Client list, which is usually located in the "Home Network" or "My Networks and WiFi" menu. It provides a comprehensive table of all active connections, including wired and wireless interfaces. The system automatically sorts devices by connection type, allowing you to instantly distinguish between those connected via cable and those using wireless.

Pay attention to the "Online Time" and "Connection Speed" columns. Sudden speed spikes on an unknown device may indicate heavy content downloading or, worse, a botnet. If you detect suspicious activity, you can change the device name directly in the interface for easier identification, for example, by renaming "Unknown Device" to "Son's Laptop."

It's important to note that some devices may appear with temporary names assigned by the DHCP server. For accurate identification, always check MAC address, which is a unique identifier for the network card. In new firmware versions KeeneticOS A function for displaying manufacturer logos (Apple, Samsung, Xiaomi) has also appeared, which makes it much easier to find the “offender”.

⚠️ Attention: The web configurator interface may vary slightly depending on the installed firmware version and the selected operating mode (router, access point, or extender). If you don't see the menu item, check that the display mode isn't set to "Basic"—for full control, you need to use the "Advanced" configuration mode.

Checking the network via the Keenetic mobile app

For users who value mobility, developers Keenetic We've created a functional app for iOS and Android. It allows you to monitor your network status from virtually anywhere with internet access, or locally from home. After logging in to the app (either locally or via the KeeneticCN cloud), the main screen displays a diagram of your network with the number of active clients.

By tapping the "Devices" or "Clients" icon, you'll see a list of all connected devices. The app's interface is optimized for touchscreens: swiping left on a device often opens quick actions, such as blocking or limiting speed. This is especially convenient when you need to quickly "kick out" a neighbor without opening your laptop or launching a browser.

One of the key features of the mobile client is the ability to receive Push notifications New device connections. If you enable this feature in your security settings, your phone will vibrate immediately as soon as someone attempts to connect to your WiFi. This allows you to respond to intrusions in real time, without waiting for a scheduled scan.

The app also lets you create and manage guest networks on the fly. You can temporarily share access with friends, then disable the entire guest subnet with a single tap. This flexibility makes the mobile tool just as powerful as a full-featured web interface on a PC, especially in situations that require a quick response.

Client List Analysis: Names, MAC Addresses, and Types

When examining the list of connected devices, it's important to understand what exactly you're seeing. Each device on the network Keenetic is described by a set of parameters that help identify its owner and purpose. The primary identifier is MAC address — a unique 12-digit code embedded in the network card. The first six characters of this code (OUI) identify the hardware manufacturer.

The second important parameter is the IP address assigned by the router's DHCP server. It can be dynamic (changing) or static (reserved for a specific device). The table below explains the main columns you'll find in the monitoring interface:

You often encounter devices named "android-xxxx" or "windows-pc." These are standard default names that owners rarely change. In such cases, MAC address analysis can be helpful. There are online databases that allow you to determine the network chip manufacturer using the first three pairs of digits, narrowing down your search.

How to distinguish your devices from others

Determining which devices are yours and which are intruders can sometimes be difficult, especially in a home with a lot of smart devices. The most reliable method is elimination. Turn off WiFi on all your known devices (smartphones, tablets, laptops, TV set-top boxes) and see which devices remain on the router's list of active clients.

The remaining "tails" are either wired devices (computers, game consoles, printers), forgotten gadgets, or intruders. Wired devices are easily identified physically by tracing the cable. However, if a wireless device remains on the list that you can't identify, you should be wary.

Also pay attention to activity times. If a smart light bulb or robot vacuum cleaner shows high network activity at 3 a.m., when everyone is asleep, it's time to check. Normal IoT devices typically transmit minimal data packets (on/off status), but don't download gigabytes of traffic.

⚠️ Attention: Modern smartphones (iOS 14+, Android 10+) use the "Private Wi-Fi Address" feature by default. This means that each time you connect to a new network or after resetting your network settings, the phone may generate a new, random MAC address. Don't be alarmed if a "new" iPhone with an unknown address appears in the list—it's most likely yours.

Block unwanted devices and protect your network

If you have identified a device that should not have access to your network, Keenetic offers several levels of protection. The easiest way is to click the "Internet Access" toggle next to the suspicious client in the list. This will immediately terminate the connection for that MAC address, but will not remove it from the list (it will still appear blocked).

A more radical method is to enter the MAC address into Blacklist (Blacklist). In the "Client List" section, select the desired device and click "Block." The router will then ignore any connection attempts from that address, even if the attacker knows your password.

However, blocking is a matter of dealing with the consequences. If someone connects to you, it means your WiFi password has been compromised. The most effective way to kick everyone out at once is to change the WiFi network password. After changing the security key, all devices will be disconnected, and you'll have to re-enter the new password on your devices. Outsiders, however, without the new key, will no longer be able to connect.

It's recommended to use a complex password containing mixed-case letters, numbers, and special characters. Avoid using simple sequences like "12345678" or your phone number. Also, make sure you're using a modern encryption standard. WPA2/WPA3, and not the outdated WEP, which can be cracked in seconds.

Advanced Methods: CLI and System Logs

For advanced users and system administrators Keenetic Provides command-line interface (CLI) access via Telnet or SSH. This allows you to obtain network information in text format, which is convenient for scripting or remote monitoring via the console. To log in, you must enable the "Telnet Server" or "SSH Server" component in the "Management" → "System Settings" menu.

After connecting to the router via a terminal (for example, PuTTY) and authorization, you can use the command show ip dhcp leaseIt will display a table of all assigned IP addresses, linked to MAC addresses and lease times. This is raw data, often containing more information than the graphical interface.

Keenetic > show ip dhcp lease
Lease ID IP Address MAC Address Hostname Expires
1 192.168.1.10 00:11:22:33:44:55 Laptop-User1 86300
2 192.168.1.15 AA:BB:CC:DD:EE:FF Unknown 43200
...

It is also useful to look at the system log (show log), where connection and disconnection events are recorded. You can see the time the unknown device first attempted to connect and how many times it attempted to brute-force the password. This information is valuable for understanding the scope of the problem.

Frequently Asked Questions (FAQ)

Can a Keenetic router display the browsing history of connected devices?

By default, the router does not store a detailed URL history (visited websites) for each client in a user-accessible form for performance and privacy reasons. However, if the feature is enabled SkyDNS or Yandex.DNS With the appropriate cloud logging settings, you can view request statistics through the web interface of these services. The router's logs primarily contain system events, not full traffic.

Why is there a device named "Keenetic" showing up in the client list?

This is normal. This is how the router itself (its processor or main interface) is displayed, as well as any connected USB modems or other Keenetic routers operating in repeater mode on your network. If you have a mesh system with multiple devices, each will have its own name, but they are all part of the same infrastructure.

What should I do if I blocked a device but it reappeared in the list?

Most likely, the user changed the MAC address on their device (using the randomization feature), or you blocked only one interface (e.g., WiFi), and the device connected via a guest network or cable. Check if you have guest access enabled with a simple password. In this case, you need to change the password specifically for the guest network or disable it.

Does the number of connected devices affect internet speed?

Yes, it does. The WiFi channel is shared between all active clients. If one device starts actively downloading files or watching 4K video, it will take up most of the bandwidth, leaving less speed for other devices. Furthermore, a large number of connections increases the load on the router's processor, which can lead to lag (ping) in games.