Many Beltelecom subscribers are familiar with the situation where their internet starts to slow down and unknown devices appear in their router logs. Users often notice that their connection speed drops in the evening, even though their tariff plan offers high speeds. This is the first sign that your network is being compromised. an outside user has connected, using your traffic for their own needs. It's important to understand that the presence of other people's devices on the local network not only creates a load on the channel but also a potential threat to the security of your personal data.
In most cases, checking current connections is as simple as logging into the router interface, which is typically installed by your provider when you sign your contract. Modern router models ZTE, Huawei, and SercommByFly's devices have built-in monitoring tools that allow you to view a list of active clients in real time. However, the interface of these devices may vary depending on the year of manufacture and firmware version, often confusing users when trying to find the information they need.
In this article, we'll detail the steps to detect intruders, explain how to distinguish legitimate devices from unauthorized smartphones, and provide step-by-step instructions for blocking intruders. You'll learn how to correctly interpret MAC address data and understand why simply changing your password isn't always the only or sufficient solution.
Analysis of indicators and indirect signs of hacking
Before delving into the router's technical settings, it's worth paying attention to the network's behavior. The first and most obvious symptom of unauthorized access is unstable speed Connection. If you're paying for 100 Mbps, but when downloading files or watching high-definition videos, your speed drops to 5-10 Mbps, this is cause for concern. This is especially concerning if this occurs when all your home devices are turned off or in sleep mode.
Another sign may be strange behavior of the indicators on the router body. The light WLAN or WiFi The indicator light may flash frequently and erratically even when you're not doing anything online. This indicates active data packet exchange between the router and the connected device. However, it's worth considering that background processes on your own devices, such as operating system updates or cloud storage syncing, can also cause indicator light activity.
β οΈ Attention: Don't rely solely on blinking lights as an accurate indicator of a hack. Modern routers have data buffering, and the blinking pattern may not correspond to the actual volume of traffic being transmitted. Only the device's software interface provides accurate information.
It's also worth checking the browsing history of devices used by children or other family members. Sometimes, it's a family member who's "connected to the WiFi" and forgot to warn them about a new gadget. If you're confident you know all your devices by name, and your internet connection is slow, you should perform a hardware check through the router's web interface.
Login to the ByFly router control panel
To get precise information about who is consuming your traffic, you need to log in to your router's administrative panel. Beltelecom subscribers most often use equipment from this brand. ZTE, Huawei, or SercommThe default login address remains the same in most cases: 192.168.1.1 or 192.168.0.1In the address bar of your browser (Chrome, Firefox, Opera), enter this IP address and press Enter.
The system will ask for your login and password. If you've never changed these details, they're likely still the factory defaults. For ByFly equipment, the default pair is often admin And admin, or the information indicated on the sticker on the bottom of the router. In some cases, especially on older models ZTE F660, the password can be unique for each device and printed in the field PWD or Password On the label. It's important not to confuse the WiFi password with the web interface password.
If the default combinations don't work, the password may have been changed previously by you or the technician during installation. In this case, you'll need to perform a factory reset, which will require you to configure an internet connection (PPPoE or DHCP) if you don't have the necessary authorization information. Be careful with this procedure, as it requires you to have your ISP contract on hand.
βοΈ Checking access to the router
Searching for connected devices in the ZTE and Huawei interface
After successfully logging into the control system, the interface may look different depending on the model. On popular models ZTE F660 And F670 you need to go to the tab Network (Network), and then select the subkey WLAN or WirelessThere is often a clause there Station Info or Associated DevicesThis list displays all devices that are currently accessing the internet through your access point.
In routers Huawei HG8245 and their modifications the path may look different: Home Network -> WLAN -> WLAN User Access Control or simply User Device InformationHere you will see a table where each device is assigned its own IP address and MAC address. The MAC address is a unique identifier for a network card, which looks like a set of 12 hexadecimal digits (for example, A4:5E:60:C2:11:22). It is by this code that you can try to determine the manufacturer of the device.
Modern firmware often has a more user-friendly interface, where the device name may be displayed next to the MAC address (for example, iPhone-Aleks or Samsung-TV). However, if the device is connected for the first time or hides the name, it may appear as Unknown Or simply a set of characters. In this case, a table of MAC address prefixes matching manufacturers will help.
| MAC prefix (first 6 characters) | Probable manufacturer | Device type | Note |
|---|---|---|---|
| A4:5E:60 | Apple | iPhone, iPad, MacBook | A frequent visitor to the networks |
| B8:27:EB | Raspberry Pi | Single-board computer | Rarely, but it happens |
| D8:9D:67 | Pegatron | Routers, set-top boxes | Often Asus or gaming consoles |
| F4:F5:D8 | Apple | Apple devices | Older iPhone/iPad models |
| 00:1A:2B | Realtek | USB WiFi adapters | Cheap PC whistles |
Using this table, you can match an unknown MAC address with the devices you own. If you see an address starting with A4:5E:60If you don't have an Apple device, it's almost guaranteed to be someone else's. However, be careful: some network card manufacturers use third-party prefixes or randomize them to protect privacy.
Elimination method and gadget identification
The most reliable way to identify who's who in the connection list is by elimination. You need to disable WiFi on all your devices one by one: smartphones, TVs, laptops, smart plugs, and speakers. After each disconnection, refresh the client list page on the router. The device that disappears from the list corresponds to the device you just disabled. Make a note of the MAC addresses that correspond to your devices.
Particular attention should be paid to smart homeLight bulbs, vacuum cleaners, security cameras, and kettles are also connected to WiFi and take up space in the list. Users often forget about them, believing they consume little data. While they do consume little data, their presence on the list can be confusing when searching for a "heavy" user downloading torrents.
If after disabling all your devices there is still an active client with a high signal strength left in the list (RSSI If the signal is close to 0 or -30..-50 dBm, then the intruder is physically nearby, most likely in your apartment or in your neighbor's apartment next door. In this case, you need to take immediate action to block it.
β οΈ Attention: Signal strength (RSSI) in ByFly routers is often displayed as a negative number. The closer the value is to zero (for example, -40 is better than -90), the closer the device is. If an unknown device has a signal strength of -35, it is in the next room.
Some advanced users use third-party network scanners such as Fing or WiFi Analyzer on Android. These apps can display more detailed information about devices on the network, including open ports and operating system versions, which helps more accurately identify the intruder.
Blocking intruders and setting up security
Once you've determined the MAC address of the other device, you need to block it. In the ByFly router interface (ZTE/Huawei), this is done using the MAC Filter (MAC Address Filter). You need to find this section, it is usually in the same menu. WLAN or Security. Select mode Deny (Prohibit) or Blacklist and add the intruder's MAC address there. Once the settings are applied, the device will no longer be able to connect, even if it knows the password.
However, MAC address filtering isn't a panacea. An experienced user can spoof (clone) their device's MAC address to that of your legitimate device if they intercept it. Therefore, the most effective method remains Change your WiFi passwordGo to your wireless network settings, change the password to a complex one (at least 10 characters, uppercase and lowercase letters, numbers), and save the settings. All devices will be disconnected, and you'll have to reconnect them with the new password.
It is also critical to check the encryption type. Make sure that in the security settings (Security Mode) protocol selected WPA2-PSK or WPA3 with encryption algorithm AESProtocols WEP And WPA/TKIP are considered obsolete and can be easily cracked by automated scripts in a matter of minutes. If you have WEP encryption, change it immediately.
Frequently asked questions and problems during verification
When monitoring a network, users often encounter ambiguous situations. For example, a device may appear as "Wireless" or "Ethernet," even though you're only connected via WiFi. This could mean that a switch or a second device is connected to the router via a cable that you forgot about. There are also cases where the router "glitches" and displays devices that were disconnected several hours ago. In such cases, rebooting the router via the power button or software helps. Reboot in the interface.
Another important aspect is the connection limit. Some plans or router models have a limit on the number of simultaneous clients (usually 10, 16, or 32). If this limit is reached, new devices (even your own) will be unable to connect. You'll see all active connections in the client list, and if there are too many, consider upgrading to more powerful equipment.
Don't forget that ByFly may offer VoIP services. The list of connected devices may show a SIP phone or a built-in phone module in the router itself (if it's a router). Don't block them, otherwise you'll lose connection. They usually have specific MAC addresses or names containing the word Voice or ATA.
Can my neighbor use my WiFi if I changed the password?
If you've changed your password to a strong one and enabled MAC address filtering, the chances of a neighbor gaining access are slim to none. However, if you use the WPS (quick connect button) feature, they may try to crack it by brute-forcing the PIN code. It's recommended to disable WPS completely in your router settings.
Why does "Unknown" appear in the list of devices, even though I know all my gadgets?
This could be a smart device (like a light bulb or a power outlet) that doesn't broadcast its name, or a system module of the router itself. Devices with a randomized MAC address may also appear this way. Check if the "Unknown" device is disabled when you turn off WiFi on your phone.
Does my ISP see that someone else is connected to my WiFi?
Your ISP (Beltelecom) only sees the overall traffic passing through your port. It doesn't see the MAC addresses of devices within your local network, as they're hidden behind your router's NAT (Network Address Translation). However, if traffic becomes abnormally high, technical support may contact you regarding network congestion.
How do I find out how much traffic each device is consuming?
Basic ByFly routers (ZTE F660, Huawei HG8245) often lack detailed real-time traffic metering for each client. This requires more advanced hardware (such as Mikrotik or Keenetic) or the installation of specialized firmware, if the router model supports it.