When the internet suddenly slows down and pages load slowly, home network owners often become suspicious. The first thought that comes to mind is whether someone has connected to your wireless connection without permission. Indeed, unauthorized access Access point access is a common problem, especially if the password was too simple or was shared with guests.
There are several proven methods for accurately determining the list of all active clients. This can be done through the router's web interface, using dedicated computer utilities, or mobile apps. It's important to understand that modern routers provide sufficient tools for this. traffic monitoring and control of connected gadgets.
In this article, we'll detail the steps for different manufacturers' equipment, explain how to distinguish your smartphone from someone else's laptop, and explore protection methods. Home network security depends not only on the complexity of the password, but also on regular monitoring of which devices are located within your perimeter.
Analysis of router indicators and indirect signs
Before delving into complex settings, it's worth paying attention to the physical condition of your equipment. Most routers have indicator lights on the case, and the blinking light WLAN or Wi-Fi indicates data transfer. If all your devices are turned off or in airplane mode, and the indicator continues to flash rapidly, this is a sure sign of network activity.
A sharp drop in internet speed can be an indirect sign of an intrusion. When someone downloads large amounts of data, torrents, or watches high-definition videos over your network, your bandwidth is reduced. This is especially noticeable if your ISP offers a lower-than-perfect plan.
⚠️ Note: A blinking activity indicator does not always indicate a hack. Background operating system updates, cloud storage synchronization, or smart devices (cameras, speakers) also cause active data exchange.
Another symptom may be the inability to access the router settings. If the page doesn't open when you enter the correct IP address or requires a password you didn't set, there's a high probability that the attacker has already changed the access settings. In this case, only a full reset will help. resetting the router to factory settings using the Reset button.
Checking connected devices via the web interface
The most reliable and accurate way to see the real picture of your connections is to log into your router's administrative panel. To do this, you need to know the gateway IP address, which is usually 192.168.0.1 or 192.168.1.1Enter this address in your browser's address bar and log in using your administrator username and password.
Interfaces vary by manufacturer, but the logic for finding clients is the same. You need to find a section called "Client List," "DHCP Client List," "Wireless Status," or "Network Map." This is where all devices assigned an IP address by your router are displayed.
☑️ Check via web interface
In the list you will see MAC addresses, IP addresses, and sometimes device names. MAC address — This is a unique network card identifier that helps you identify which device is connected to the network. Compare the number of rows in the table with the number of devices you have. If there are more, there's an extra user on the network.
Using specialized software and network scanners
If logging into your router is impossible or the interface is too complex, you can use third-party programs to scan the network. One of the most popular and functional tools is the utility Advanced IP Scanner for Windows. It quickly scans a range of addresses and produces a detailed report.
There are scanner apps for mobile devices such as Fing or Network ScannerThey're convenient because they allow you to run diagnostics directly from your smartphone while within Wi-Fi range. The programs detect not only the IP and MAC address but also the network card manufacturer, making identification easier.
When using such programs, it's important to pay attention to port status and open services. Active scanning may be detected by security systems, if installed, but this is a safe method for home use. You'll receive a list of all active nodes on the local network.
Decoding MAC addresses and identifying devices
The most difficult part of checking is understanding who owns each MAC address in the list. A MAC address consists of 12 hexadecimal characters separated by colons or hyphens. The first six characters (OUI) identify the network equipment manufacturer.
For example, if the address starts with 00:1A:2B, this may indicate an Apple device, and the prefix B8:27:EB Often refers to Raspberry Pi Bluetooth/Wi-Fi modules. Knowing the manufacturers of your devices (Samsung, Xiaomi, Intel) allows you to quickly filter your gadgets.
| MAC Prefix (OUI) | Probable manufacturer | Device type | Status |
|---|---|---|---|
| A4:5E:60 | Apple, Inc. | iPhone, iPad, Mac | Mine |
| DC:FE:18 | Hewlett Packard | Laptop, Printer | Mine |
| 68:37:E9 | Buffalo Inc. | Network equipment | Unknown |
| 00:50:56 | VMware, Inc. | Virtual machine | PC |
Modern routers and apps often have a database of manufacturer names and automatically insert them. If you see a device with the name "Unknown" or a strange set of characters, try temporarily disabling Wi-Fi on your devices one by one and watch for the entry to disappear from the list.
What to do if MAC addresses are randomized?
Modern iOS and Android devices can use random MAC addresses for privacy. In this case, the device name in the router's list may change or appear generic. Use the number of connections and the chip manufacturer as a guide.
Methods for blocking uninvited guests
Once a rogue device is detected, it's essential to immediately block its access. The easiest way is to change the Wi-Fi network password. Once the encryption key is changed, all devices will be disconnected, and you'll only have to reconnect your own devices with the new password.
A more flexible method is to use Blacklist (blacklist) or the "Client Blocking" feature in the router settings. You can add the intruder's MAC address to the blacklist, and the router will ignore their connection requests, even if the password is known.
There is also a method Whitelist (whitelisting), where access is restricted to strictly defined MAC addresses. This is the most reliable, but also the most labor-intensive method: any new device (for example, a friend's phone) won't be able to connect until you manually enter its address into the settings.
⚠️ Important: When changing your password or filtering settings, make sure you are connected to your router via cable or have a backup access channel to avoid blocking yourself from the network.
Don't forget to check your security settings after blocking. If an attacker was able to connect, you may be using an outdated WEP or WPA encryption protocol that can be easily cracked. Switch to WPA2-PSK or WPA3.
Prevention and strengthening of network security
To make the question "how do I find out who's using my Wi-Fi" irrelevant, you need to minimize the risk of re-intrusion. First of all, stop using the feature WPS (Wi-Fi Protected Setup). This technology, which allows connection via a button or PIN code, has known vulnerabilities.
Update your router firmware regularly. Manufacturers release updates that patch security holes that allow hackers to access the admin panel. Check the firmware update in the "System Tools" or "Administration" sections.
It's also recommended to disable remote management for your router unless you specifically use it. This will prevent access to your device's settings from outside the internet, leaving control only available from within your home.
⚠️ Note: Router interfaces are constantly being updated. The layout of menu items may differ from what's described. If you don't find the option you need, please refer to the official documentation for your model or the manufacturer's website.
Frequently Asked Questions (FAQ)
Can my neighbor see my files if he is connected to Wi-Fi?
If network discovery and file sharing are enabled on your local network, a neighbor could theoretically attempt to access shared folders. However, modern operating systems consider new networks public by default and block file access. Nevertheless, the risk exists, and access by outsiders should be blocked.
Will the device change its MAC address after rebooting?
The physical MAC address of a network card is hardcoded by the manufacturer and does not change after a reboot. However, it can be changed programmatically (spoofing), and some operating systems (iOS, Android, Windows 10/11) may use random MAC addresses when connecting to new networks to protect privacy.
How can I find out my Wi-Fi password if I'm using a computer?
If the computer is already connected to the network, you can view the password in the saved settings. In Windows, this is done via the command line with the command netsh wlan show profile name="Network_Name" key=clear or through the graphical interface of the wireless network properties in the Security tab.
Does having a connected neighbor affect my internet speed?
Yes, it does have a direct impact. The Wi-Fi channel is shared among all active users. If a neighbor starts downloading files or watching 4K videos, your speed can drop dramatically, as the router's wireless interface operates in half-duplex mode and can't transmit data to everyone simultaneously at full speed.