Who's Connected to My Wi-Fi? How to Check and Ban Intruders

Have you noticed that your internet has become slower and your data is running out suspiciously quickly? Perhaps other devices have connected to your Wi-Fi. According to KasperskyEvery fifth user has experienced unauthorized access to their home network. Unauthorized devices not only steal your traffic but can also become a source of viruses, phishing, or even cyberattacks on other devices on your local network.

In this article you will learn how check the list of connected devices on routers from different manufacturers (TP-Link, ASUS, Keenetic, MikroTik etc.), as identify other people's gadgets by MAC address or name, as well as block unwanted users and protect your network from repeated intrusions. We'll cover both standard methods via the router's web interface and advanced ones using mobile apps and specialized utilities.

We will pay special attention to hidden connections, which are not displayed in the standard list of devices, but still consume traffic. Such cases often occur when using vulnerable protocols (for example, WPS) or if the attacker has spoofed the MAC address of his device.

1. How to check connected devices via the router's web interface

The most reliable way is to access your router's control panel. No additional software is required; a browser on your computer or smartphone is sufficient. The instructions are universal for most models, but we'll highlight specific features for popular brands.

General algorithm:

• 🌐 Enter in the address bar of your browser 192.168.0.1 or 192.168.1.1 (less often) 10.0.0.1). If the page does not open, check your router's IP using the command ipconfig (Windows) or ifconfig (macOS/Linux).
• 🔑 Enter your login and password (usually admin/admin, if you haven't changed it). On some models Keenetic The password is indicated on the sticker below.
• 📊 Find the section with the list of devices. It may have different names:
  • TP-Link: DHCP → DHCP Clients or Wireless Mode → Wireless Mode Statistics
  • ASUS: Network map or Local Network → DHCP Server
  • MikroTik: IP → DHCP Server → Leases
  • Zyxel Keenetic: Home Network → Devices

In the list you will see:

• 📱 Device name (if it is not hidden). For example, iPhone-12-Pro or Samsung-Galaxy-S22.
• 🔢 IP address (local, like 192.168.0.103).
• 🔗 MAC address (unique identifier, for example 00:1A:2B:3C:4D:5E).
• ⏱️ Connection time or IP rental.

Check the cable connection (Wi-Fi may be disabled) | Restart the router by pressing the Reset button (hold for 10 seconds) | Try a different browser (Chrome, Firefox, Edge) | Make sure the router's IP is correct (look at the sticker) | Disable VPN/proxy on your device -->

⚠️ Note: If you see a device named Unknown, Host or a set of random characters—this is a potential intruder. But some legitimate devices (for example, smart light bulbs) Xiaomi) can also be displayed like this.

2. How to distinguish your devices from others

Even if the list contains many unknown devices, don't rush to block them all. These could be your family members' gadgets, smart appliances, or guest connections. Here's how to identify your devices:

Method 1: Checking by MAC address

• 📱 On Android: go to Settings → About phone → General information → Wi-Fi MAC address.
• 🍎 On iPhone/iPad: Settings → Wi-Fi → (tap your network) → MAC Address.
• 💻 On Windows: run the command ipconfig /all V CMD and find the line Physical address.
• 🖥️ On macOS: System Preferences → Network → Advanced → Ethernet/Wi-Fi → MAC Address.

Method 2: Analyzing device names

Manufacturers often assign standard names to devices based on their model. For example:

Method 3: Monitoring activity

If the device is connected but not transmitting data (in the column Traffic or RX/TX zeros), it could be:

• 🔌 Smart socket or sensor in standby mode.
• 📱 An old smartphone forgotten online.
• 🚨 An outsider who has connected but has not yet started downloading data.

Once a month|Only when the internet is slow|Never checked|I use automatic monitoring-->

3. Advanced Methods: Mobile Apps and Utilities

If your router's web interface seems complicated or you want more data, use specialized programs. They display not only a list of devices, but also their activity, data usage, and even geolocation (for some router models).

Smartphone apps:

• 📱 Fing (Android/iOS) — scans the network, identifies device manufacturers by MAC address, tests speed, and checks ports for vulnerabilities.
• 📱 WiFi Guard (Android) - Compares current connections with your "whitelist" and notifies you of new devices.
• 📱 NetScan (iOS) - Shows detailed information about each device, including open ports.

PC programs:

• 💻 Wireless Network Watcher (Windows) - a free utility from NirSoft, scans the network and saves connection logs.
• 💻 Angry IP Scanner (Windows/macOS/Linux) - Checks all IPs in your subnet and shows active hosts.
• 🐧 nmap (Linux/macOS) — a command-line utility for deep network analysis. Scanning command:

  nmap -sn 192.168.0.0/24

Router functions for automatic control:

Some models support:

• 🔔 New device notifications (For example, ASUS AiProtection).
• 📅 Connection log with history for the last month (Keenetic, TP-Link Omada).
• 🛡️ Automatic blocking of unknown devices (Netgear Armor).

4. How to block other people's devices: step-by-step instructions

If you detect a suspicious device, you should disable it immediately. Here's how to do this on different routers:

Method 1: Blocking by MAC address (the most reliable)

1. Copy the MAC address of the stranger from the list of devices.
2. In the router panel, go to the section Wireless Mode → MAC Filter (or Security → MAC Filter).
3. Add the address to the blacklist and save the settings.
4. Reboot your router (sometimes the blocking is only applied after a reboot).

Method 2: Disabling via DHCP (Temporary Solution)

• Find the device in the list DHCP Clients.
• Click Remove, Disconnect or Release (depending on the router model).
• This will disable the device until the next router reboot or IP lease.

Method 3: Changing the Wi-Fi password (radical method)

If there are a lot of strangers or you are not sure which devices are yours and which are not:

1. Go to Wireless Mode → Security Settings.
2. Change your password to a complex one (at least 12 characters, with numbers and special characters).
3. Select encryption type WPA3-Personal (or WPA2-PSK, If WPA3 (not supported).
4. Save your settings and reconnect your devices.

⚠️ Attention: If you have a smart home with devices that are difficult to reconfigure (for example, Philips Hue or Nest Thermostat), changing the password will disable them. In this case, it is better to use MAC address filter or guest network.

5. Hidden Connections: How to Detect "Invisible" Intruders

Some attackers connect to the network but don't show up in the default device list. This may occur if:

• 🔄 They changed the MAC address (MAC-spoofing) to the address of one of your devices.
• 🌐 They exploit protocol vulnerabilities WPS (even if it is disabled in the settings).
• 📡 They connected to the router via Ethernet (cable), not via Wi-Fi.
• 🕵️ They exploit vulnerabilities in the router firmware (especially relevant for older models).

How to identify hidden connections:

1. Check your traffic: In the section Statistics or Bandwidth Check the amount of data being transferred. If the traffic exceeds your normal usage, but there's nothing suspicious in the list of devices, this is a sign of a hidden connection.
2. Use WiresharkThis program analyzes all network traffic. Run a packet capture and filter by protocol. DHCP - this way you will see all devices receiving IP.
3. Check the ports: Enter in browser 192.168.0.1:8080 or other popular ports (eg :3389 For RDP). If the page opens, someone is using your router as a proxy.

Signs of a hidden connection:

• 📉 A sharp drop in internet speed at certain times of the day.
• 🔋 The router's battery drains quickly (if it has a battery).
• 🔥 The router overheats for no apparent reason.
• 📡 Unknown SSIDs appearing in the list of available networks (if someone is distributing Wi-Fi from your router).

What to do if you discover a hidden connection?

1. Immediately disconnect the router from the Internet (remove the WAN cable).

2. Reset the settings to factory settings (Reset button).

3. Update your router firmware to the latest version (download from the official website).

4. Reconfigure the router with a new network name (SSID) and a complex password.

5. Turn off WPS, UPnP And Remote Management in security settings.

6. Turn on Firewall And DoS Protection, if these features are available in your model.

6. How to protect Wi-Fi from repeated intrusions

Even after blocking outsiders, your network remains vulnerable unless you take precautions. Here 10 safety rules, which will reduce the risk of re-hacking:

1. Turn it off WPSThis protocol is vulnerable to brute-force attacks. Find it in your router settings. WPS → Disable.
2. Use WPA3: If your router supports WPA3-Personal, select it instead WPA2If not, use it. WPA2-PSK With AES encryption.
3. Change the default admin password: Many routers have default admin/admin or admin/blank passwordCreate a strong password for your control panel.
4. Turn it off Remote ManagementThis feature allows you to manage your router from the internet. Find it in System Tools → Administration and deactivate.
5. Turn on Firewall: Activate the built-in firewall in the security settings.
6. Update the firmware: Manufacturers regularly patch vulnerabilities. Check for updates in the section System Tools → Firmware Upgrade.
7. Create a guest network: For friends and smart devices, use a separate network with limited access to local resources.
8. Turn it off UPnP: This feature simplifies setup, but opens up ports for attacks. Find it in Advanced → UPnP.
9. Turn on MAC filtering: Allow connections only to devices from the "white list".
10. Hide your SSID: Disable network name broadcasting in Wireless → Basic Settings → Hide SSIDThis won't protect you from experienced hackers, but it will reduce the number of accidental connections.

Additional measures for advanced users:

• 🔄 Set up VLAN to separate traffic (for example, a separate VLAN for smart home).
• 📡 Install alternative firmware (DD-WRT, OpenWRT) for advanced security features.
• 🔐 Use VPN for all router traffic (for example, NordVPN or ProtonVPN at the router level).

⚠️ Warning: Hiding the SSID and MAC filtering are not reliable protection against experienced hackers. They only make it more difficult for casual users to connect. The main protection is complex password And regular firmware updates.

7. Common mistakes and how to avoid them

When checking and securing Wi-Fi, users often make mistakes that actually make things easier for attackers. Let's look at the most common ones:

Mistake 1: Using weak passwords

Passwords like 12345678, qwerty or password are hacked in seconds. How to fix:

• Use password generators (eg. Bitwarden or 1Password).
• The minimum length is 12 characters, with capital letters, numbers and special characters.
• Do not use personal information (dates of birth, pet names).

Error 2: Ignoring firmware updates

Outdated firmware contains vulnerabilities that are exploited by hackers. How to fix:

• Enable automatic update checking in your router settings.
• Once every 3 months, manually check for new versions on the manufacturer's website.
• Please back up your settings before updating.

Error 3: Connecting smart devices to the main network

Smart light bulbs, sockets, and cameras often have weak security and can become a backdoor for hackers. How to fix:

• Create a separate network for IoT devices (Guest network or VLAN).
• Update the firmware of your smart gadgets through their official apps.
• Disable unnecessary features (for example, remote access to cameras).

Mistake 4: Storing your Wi-Fi password publicly

Many people leave their password on a sticker on their router or share it on instant messengers. How to fix:

• Use a password manager for secure storage.
• For guests, create temporary access via Guest network with a time limit.
• Do not send your password in plain text - use secure channels (e.g. Telegram with secret chat).

Error 5: Neglecting the connection log

Many routers keep an activity log, but users do not check it. How to fix:

• Check back once a week System log or Log in the router settings.
• Set up sending logs to email (if your router supports this feature).
• Use monitoring programs, for example PRTG Network Monitor.

FAQ: Answers to Frequently Asked Questions

Is it possible to find out who is connected to my Wi-Fi if I'm not an admin?

No, without access to the router control panel or specialized programs (like Fing) you won't be able to see the full list of devices. However, you can indirectly identify someone else's connection by:

• A sharp drop in internet speed.
• Unexplained traffic surges (check in your provider's personal account).
• The appearance of unknown devices in the local network (for example, in Network environment on Windows).

If the router is not yours (for example, in an office or dorm), ask the network administrator to provide information about the connected devices.

What should I do if someone else's device connects again despite being blocked?

This means that the attacker:

1. Replaces the MAC address with an authorized one (your device).
2. Exploits a vulnerability in the router firmware to bypass blocking.
3. Connects via Ethernet or WPS.

Solution:

• Completely reset the router to factory settings (button Reset).
• Update your firmware to the latest version.
• Turn it off WPS and change the password to a more complex one.
• Turn on MAC filtering in the "allow only specified addresses" mode.
• If the problem persists, contact your provider; there may be a leak on their end.

Can my neighbor connect to my Wi-Fi if the signal is weak?

Yes, even if you have a weak signal, your neighbor can:

• Use Wi-Fi amplifier (repeater) to capture your signal.
• Connect via directional antenna (For example, Yagi), which catches nets at a distance of up to 1–2 km.
• Exploit protocol vulnerabilities WPS, which works even with a weak signal.

How to protect yourself:

• Reduce the Wi-Fi transmission power in your router settings (if you don't need a large coverage area).
• Turn it off WPS and use WPA3.
• Turn on MAC filtering.

How can I check if someone is using my Wi-Fi for illegal activities?

If someone uses your network to download pirated content, send spam, or conduct hacking attacks, you may be held responsible. Signs of dangerous use:

• 📧 You receive emails from your provider about traffic overages or violations.
• 🚨 Your IP address has been blacklisted (check on Spamhaus or AbuseIPDB).
• 🔍 The router logs show suspicious connections to torrent trackers or foreign servers.

What to do:

1. Change your Wi-Fi password and router admin password immediately.
2. Check the list of connected devices and block unknown ones.
3. Please contact your ISP and ask them to change your external IP address.
4. If your suspicions are confirmed, file a police report of unauthorized access.

Is it possible to track the physical location of someone connected to my Wi-Fi?

Technically, it's possible, but difficult and not always legal. Here's what you can do:

• 📍 Approximate location:
  • Use programs like MoocherHunter (only for Android with root rights). It shows the direction to the device based on signal strength.
  • If the stranger is connected via cable, check the physical ports on the router.
• 🚔 Legal aspects:
  • Self-tracking may violate privacy laws (for example, Article 137 of the Russian Criminal Code, "Violation of the Inviolability of Private Life").
  • If an outsider causes harm (steals data, spreads viruses), contact the police with a report of unauthorized access (Article 272 of the Criminal Code of the Russian Federation).

Most home users limit themselves to locking their device and strengthening network security.