When the internet becomes unstable and the speed drops for no apparent reason, it often raises suspicion among home equipment owners. In the age of ubiquitous wireless networks, it's precisely unauthorized access is becoming one of the main causes of such problems. Many users are unaware that neighbors or random passersby can use their traffic, download large files, or even run malicious scripts within the local network.
Owners of equipment of this brand ASUS are in a more advantageous position thanks to the well-thought-out firmware interface ASUSWRT, which allows for detailed monitoring of network activity. Knowing how to check the list of connected clients is a basic digital hygiene skill that allows you to quickly respond to security threats. In this article, we'll discuss not only methods for detecting "guests" but also ways to reliably protect your perimeter.
Symptoms of strangers on your network
Before messing with your router settings, it's worth paying attention to indirect signs that indicate the presence of unauthorized devices. Users often ignore obvious signals, blaming them on bad weather or ISP issues, when in fact the cause is actually channel congestion. If you notice activity indicators flashing wildly while all your devices are asleep, this is cause for concern.
There are a number of telltale signs that your Wi-Fi has become public without your knowledge. Please pay attention to the following:
- 📉 A sharp drop in internet speed during peak hours when you are not downloading anything.
- 🔴Indicator flashing WLAN or Wi-Fi on the router body when the devices are turned off.
- 🔐 Blocking access to the admin panel or changing a password you haven't changed.
- 💻 Unknown computer names appearing in the Windows network environment.
⚠️ Attention: Some antivirus programs and update systems can generate background traffic that mimics unauthorized activity. Don't panic ahead of time and check the official list of devices first.
However, you can't rely solely on indirect signs, as they could be the result of hardware failures or background operating system services. The only way to get reliable information is to go to web interface router management. This is where the exact IP address lease table (DHCP Lease) is stored, which will show the actual list of all active MAC addresses.
Login to the ASUSWRT Control Panel
To begin diagnostic procedures, you need to access the device's administrative panel. The standard address for the equipment ASUS usually looks like this 192.168.1.1 or router.asus.comEnter this address into the address bar of any browser on a device connected to the network. If the default address was previously changed, you can find it in your computer's network adapter settings.
The system will ask for authorization. If you haven't changed your login details before, try the default combination: login admin and leave the password field blank (or also enter admin). In modern models with firmware ASUSWRT Merlin or new versions of the software have increased security and login without a password may be blocked.
After successful authorization, you'll be taken to the main status page, which displays general connection information. Depending on your firmware version, this is where you'll see the initial summary information. However, for a more detailed analysis, you'll need to go to the specialized network map or traffic monitoring section.
Analyzing the client list through the Network Map
The most convenient visualization tool in routers ASUS The Network Map section is located in the left vertical menu and provides a graphical representation of all active connections. In the center of the screen, you'll see your router, and to the right or bottom, a list of connected clients, divided into wired (LAN) and wireless (Wi-Fi) devices.
Clicking on the wireless client icon will expand the detailed list. This displays not only IP addresses but also MAC addresses and hostnames (if broadcast by the device). This allows you to quickly identify, for example, "Ivan-iPhone" or "Samsung-TV-Livingroom." Any device with the name "Unknown" or an unknown MAC address requires close attention.
It's important to understand the difference between wired and wireless clients. If you haven't connected a cable directly to your computer or set-top box, but there are active devices in the list of wired clients (LAN), this may indicate physical access to your network or the presence of a hidden bridge (WDS) created by an attacker. In this case, you should change your encryption keys immediately.
Using the Wireless Log
For a more in-depth analysis beyond simply viewing the current list, it's worth checking the system logs. In the menu Administration -> System log (System Log) you can find the "Wireless Log" tab. This is where device connection and disconnection events, as well as authorization attempts, are recorded.
The log can be overflowing with technical information, so it's helpful to use the filtering feature. Look for lines containing keywords like "associated" or "disassociated." By matching the times of these events with times when you weren't personally using the internet, you can identify suspicious activity.
However, this method has a limitation: the log size is limited by the router's memory buffer size. Older entries are overwritten by newer ones. Therefore, if an intrusion occurred several days ago, the current log may no longer contain traces of it. For continuous monitoring, it's better to use external systems or regularly check current connections.
⚠️ Attention: Firmware interfaces may vary depending on the router model (RT, AX, N series) and software version. The menu item layout may vary, but the logic remains the same.
MAC filtering method for protection
Once you have identified the intruder, the most radical and effective method of protection is MAC filteringEach network adapter has a unique physical address (MAC), which can be used as a pass. In routers ASUS This functionality is located in the section Wireless network -> MAC address filter.
You can configure your router to only allow devices from the "Allow List." To do this:
- 📝 Rewrite the MAC addresses of all your trusted devices.
- 🔒 Enable the filtering mode "Accept only specified MAC addresses".
- ✅ Add the addresses of your gadgets to the table of allowed ones.
This method is considered one of the most secure, as even knowing the Wi-Fi password, an attacker won't be able to connect if their physical address isn't listed. However, it has a significant drawback: it's labor-intensive to maintain. Whenever you buy a new phone or have guests over, you'll have to manually change your router settings.
☑️ Setting up a MAC filter
There's also a "Deny List" mode, where you can add a specific MAC address of an intruder. This is convenient if you want to block a specific neighbor without reconfiguring access for everyone else. However, experienced hackers can easily change the MAC address of their network card, bypassing this blocking.
Changing your password and strengthening encryption
The most universal solution to the problem of unauthorized connections is to change the Wi-Fi network password. When the security key is changed, all connected devices will be disconnected and will have to re-enter the new password. Those who don't know the new code will simply be unable to reconnect.
When setting up security in the section Wireless network -> General Please pay attention to the encryption method. Make sure the standard is selected. WPA2-Personal or, if the equipment allows, WPA3Using outdated WEP or WPA encryption makes your network vulnerable to hacking in minutes, even with simple smartphone apps.
Make your password complex: use a combination of uppercase and lowercase letters, numbers, and special characters, at least 12 characters long. Avoid obvious combinations like your date of birth or phone number. It's also recommended to disable the feature. WPS, as it often contains vulnerabilities that allow password verification to be bypassed.
Why is WPS dangerous?
WPS technology allows you to connect without entering a password, but its security mechanism (PIN code) is often vulnerable to brute-force attacks. Attackers can crack the PIN code in a matter of hours, gaining full access to the network.
After changing the password and setting up encryption, your network becomes significantly more secure. However, remember that security is a process, not a one-time action. Periodically check your client list and update your router firmware to patch any security holes discovered by manufacturers.
Comparison table of protection methods
To help you choose a security strategy, we'll review the main methods in a comparison table. Each has its own advantages and disadvantages, depending on your situation and level of technical expertise.
| Method of protection | Efficiency | Difficulty of setup | Ease of use |
|---|---|---|---|
| Changing your Wi-Fi password | High | Low | Average (must be entered on all devices) |
| MAC filtering (Whitelist) | Very high | High | Low (difficult to add new devices) |
| Disabling WPS | Average | Low | High (does not affect the connection) |
| Hiding the SSID | Low | Low | Low (you need to manually enter the network name) |
Frequently Asked Questions (FAQ)
Can a neighbor find out my password if I haven't told it to anyone?
Yes, this is possible if you use a weak password or an outdated encryption method (WEP). The password could also have been compromised through a WPS vulnerability or if a virus-infected computer with saved passwords was previously connected to your network.
Does the number of connected devices affect internet speed?
Absolutely. The Wi-Fi channel is shared among all active clients. If someone is downloading large files or watching 4K video, other devices (including yours) will have a smaller share of the bandwidth, leading to lag and buffering.
How can I find out the name of my device if it is listed as Unknown?
Try comparing the MAC address of the unknown device with the addresses on the labels of your gadgets. If there's no match, you can temporarily disable your devices one by one and watch for "Unknown" to disappear from the list. You can also use network scanners on your smartphone for more detailed information.
Is it safe to use ASUS Guest Network?
Yes, this is a great way to secure your main network. A guest network isolates visitors from your personal files and printers. You can set a separate password for it and even limit access time or speed without worrying about the security of your main data.
What should I do if, after changing the password, someone else still connects?
This could mean that you have a device in your home (such as a smart plug or camera) that has been compromised and is creating an access point, or someone has physical access to the cable. In rare cases, this could indicate a complex virus. A full router reset and firmware update are recommended.