A sudden drop in internet speed or persistent delays when watching videos are often the first warning signs. You may not realize that someone has been using your hotspot for some time now. Free Wi-Fi is tempting for neighbors, but dangerous for the network owner, as it exposes personal data and reduces bandwidth.
Modern routers are equipped with built-in monitoring tools that allow you to view a list of all active connections in real time. Network administration It doesn't require advanced programming knowledge; all you need is the control panel login address and the ability to distinguish MAC addresses. In this article, we'll discuss how to find "ghosts" on your network and permanently block their access.
Checking your connection list is the first line of defense for your home or office network. Ignoring this process can lead to attackers using your connection for illegal activities, and the plan owner will be held responsible. Therefore, regularly auditing your connected devices should become a healthy habit for every user.
Signs of unauthorized network access
The first and most obvious symptom of a "neighborly" connection is a sharp drop in data transfer speed. If your data plan offers high speeds, but pages load slowly and videos constantly buffer, you should be wary. Traffic may be spent downloading large files or watching high-definition streaming content by someone else.
Another sign may be strange behavior of the router's indicator lights. The light responsible for wireless data transmission (usually labeled WLAN or Wi-Fi) may flash frequently even when you're not using the internet. This indicates background activity that you haven't initiated.
Sometimes antivirus programs or firewalls start issuing warnings about port scanning attempts or suspicious activity from the local network. Firewall It logs incoming requests from internal IP addresses you don't recognize. This could indicate that there's a device on your network trying to find vulnerabilities in other users' computers.
⚠️ Important: Don't rush to blame your neighbors at the first sign of lag. Speed drops can be caused by interference from household appliances, bandwidth congestion from neighboring routers, or issues with your ISP.
It's also worth paying attention to the battery life of your smartphone or laptop. If the device drains faster than usual in standby mode, this may be an indirect sign that background processes are actively transferring data through a hijacked communication channel.
Search for connected devices via the router's web interface
The most reliable way to find out who's using your Wi-Fi is to access your router's settings. To do this, open any browser and enter the router's IP address in the address bar. This is most often 192.168.0.1 or 192.168.1.1, but the exact address is always indicated on the sticker on the bottom of the device.
After entering the address, the system will ask for your login and password. If you've never changed these details, they're also listed on the factory sticker and are often a combination admin/adminOnce in the control panel, you need to find the section responsible for the wireless network status. Depending on the model and firmware, it may be called Wireless Status, Client List, DHCP Client List or Client list.
This section displays a table of all devices currently receiving an IP address from your router. You'll also see their MAC addresses and, possibly, device names. Your task is to match this data with the devices you and your family own. MAC address — is a unique identifier of the network interface that cannot be changed programmatically without special utilities.
For easy comparison, make a list of all your devices: smartphones, TVs, set-top boxes, smart plugs. Find their MAC addresses in the "About phone" or "About system" settings and compare them with what your router displays. Any unfamiliar device on the list warrants immediate action.
Where can I find my MAC address on Android?
Go to Settings → About Phone → General. Your Wi-Fi MAC address will be listed there. On iPhone: Settings → General → About -> Wi-Fi Address.
Using specialized scanning programs
If accessing your router settings is difficult or the interface is too complex, you can use third-party software. There are numerous utilities for PCs and mobile devices that scan your local network and provide detailed reports on all active nodes. These programs often display more detail than the standard router interface.
One of the most popular programs for Windows is Wireless Network Watcher from NirSoft. It requires no installation, launches instantly, and displays the IP address, MAC address, network card manufacturer, and device name. The program also features an audible alert when a new device appears on the network, which is very convenient for real-time monitoring.
For Android users, the app is a great solution. FingIt's available on Google Play and allows you to perform a deep network scan directly from your phone. The app not only displays a list of devices but also identifies their type (camera, router, PC), operating system, and even open ports. It's a powerful tool for security diagnostics.
If you are connected via mobile data or to a guest network, the scan will show an empty result or data from a different subnet.
| Program | Platform | Complexity | Key function |
|---|---|---|---|
| Wireless Network Watcher | Windows | Low | Sound notification for new devices |
| Fing | Android / iOS | Low | Determining the device type and manufacturer |
| Advanced IP Scanner | Windows | Average | Scanning IP ranges and accessing shared folders |
| Angry IP Scanner | Cross-platform | Average | Quick port scan and ping |
How to disable an uninvited guest using your router settings
Once you've identified the intruder by their MAC address, you need to block their access. The most effective method is to use the MAC Filtering or Blacklist feature. This option is located in the Wireless Network section (Wireless) or security (Security) in the router menu.
You need to activate blocking mode and enter the MAC address of the other device in the corresponding field. After saving the settings, the router will immediately disconnect from the device and prevent re-authorization. Even if the user knows the Wi-Fi password, they won't be able to connect as long as their address is blacklisted.
Some modern router models, for example Keenetic or MikroTik, allow you to manage access even more flexibly. You can not only block a device, but also limit its speed, prohibit access to the local network, or set a schedule. This gives you complete control over traffic.
If you're unsure or worried about accidentally blocking an important device (such as a smart refrigerator or security camera), use the guest network feature. Create a separate hotspot for guests with limited access and a different password, while keeping your main network hidden.
☑️ Device lock
Radical security measures: changing passwords and encryption
If you detect an intruder, blocking their MAC address is only a temporary solution. An experienced user can spoof (change) their device's MAC address to one allowed on your network. Therefore, the only reliable solution is to completely change the Wi-Fi access key.
Go to your wireless security settings (Wireless Security) and change your password. When choosing a new password, use a complex combination of mixed-case letters, numbers, and special characters. The password must be at least 12 characters long. After changing the password, all devices will be disconnected, and you will need to reconnect your devices using the new key.
Be sure to check the encryption type. Modern routers should have the standard selected. WPA2-PSK or, if the equipment allows, WPA3Legacy encryption protocols WEP And WPA They can be hacked in minutes, even by beginners using automated scripts. Don't let attackers exploit your security vulnerabilities.
⚠️ Note: After changing the Wi-Fi password, you will be required to re-enter the new passkey on all your devices (TVs, printers, phones). Make sure you have physical access to these devices before changing settings.
It is also recommended to disable the WPS (Wi-Fi Protected Setup) feature. This technology allows you to connect to the network with the press of a button, but it contains critical vulnerabilities that allow password recovery using brute-force attacks. In the router menu, find the item WPS and set the value Disable or Off.
Prevention: How to avoid re-hacking
To prevent this from happening again, it's important to follow basic digital hygiene rules. Regularly, at least every six months, change your router's admin panel password. Factory default passwords like admin/admin are known to all hackers and are easily picked up by automated bots scanning networks.
Enable event logging on your router. This will allow you to view your connection history at any time and understand who attempted to access your network and when. By analyzing the logs, you can identify patterns and timing of intruder activity.
Don't forget to update your router firmware. Manufacturers regularly release updates that patch software vulnerabilities. Firmware Security vulnerabilities are an open door for attackers. Check the latest software version in the section System Tools or Administration.
If you use complex passwords but still have concerns, you can temporarily enable MAC address filtering in "Whitelist" mode. In this mode, only devices you've manually added to the whitelist will be able to connect to the network. Anyone else, even with the password, won't be able to access it.
Is it possible to find out who is connected to Wi-Fi from a phone without installing apps?
It's difficult to view a list of connected devices on your phone without third-party software, as mobile operating systems restrict network scanning. However, you can always access the router's web interface through your phone's browser (by entering the gateway's IP address) and view the client list there, if the router's interface is mobile-friendly.
What should I do if my Wi-Fi speed drops again after changing my password?
If you've changed your password to a strong one, enabled WPA2, and updated your firmware, but your speed is still low, the problem might not be Wi-Fi hijacking. Check the channel load (your neighbors may have powerful routers), interference from microwave ovens, or the signal's range. It might be worth changing the broadcast channel in your router settings.
Does my ISP see that my neighbors are connected to my Wi-Fi?
Your ISP sees the overall traffic coming from your account, but it doesn't see a detailed list of devices within your local network (such as the MAC addresses of your neighbors' phones). To your ISP, all traffic appears as a single stream from your router. However, if your traffic becomes abnormally high, technical support may contact you regarding network congestion.