How to Find Out Who's Using Your Wi-Fi Bandwidth: A Step-by-Step Guide for Any Router

Have you noticed that your internet has become slow for no apparent reason? Video on YouTube Is your computer loading intermittently, online games are lagging, and your file download speed has dropped dramatically? Most likely, your Wi-Fi third-party devices have connected—neighbors, guests who forgot to disconnect, or even hackers using your traffic for mining or DDoS attacks. According to Kaspersky, every fifth router in Russia has at least one unauthorized connection.

In this article you will learn how identify "parasites" on your network, identify which device is consuming traffic, and block it permanently. We'll cover methods for routers. TP-Link, ASUS, Keenetic, Xiaomi and universal methods that work on any equipment. You'll also learn how to distinguish legitimate devices from rogue ones and protect your network from repeat hacks.

1. The first signs of a traffic leak: when to sound the alarm

Before you rush to check the connected devices, make sure that the problem is really in them. Here key symptoms, indicating unauthorized use of your Wi-Fi:

  • 📉 A sharp drop in speed at normal times (for example, in the evening), although the tariff has not changed.
  • 🔄 The router is overheating or frequently reboots without your intervention.
  • 📡 Activity indicator The light on the router is blinking even when all your devices are turned off.
  • 💾 Traffic in your provider's personal account exceeds your actual consumption (for example, at night when everyone is sleeping).
  • 🔒 Unknown devices appear in the list of connected gadgets (more on this below).

If at least two or three of these points ring a bell, it's time to take action. But first, rule out other causes:

  • 🔌 Check if you are connected to the router via cable devices (for example, Smart TV or game console), which may consume traffic in the background.
  • 📱 Make sure that your smartphones or laptops are not running background updates (Windows, macOS, Android) or torrent clients.
  • 🌐 Try connecting to a different Wi-Fi network (for example, from your phone) and check the speed. If it's normal, the problem is definitely with your network.
⚠️ Attention: If you use public Wi-Fi (for example, in a cafe or hotel), all the methods described are useless - the network administrator can see your traffic, and there will be hundreds of connected devices. This instruction is only for home and office routers.
📊 How often do you check the devices connected to your Wi-Fi?
Never
Once every six months
Only when problems arise
Regularly, once a month

2. Method 1: Viewing the list of devices through the router's web interface

The most reliable way to find out who is connected to your Wi-Fi is to go to router admin panelThe instructions are universal for most models, but the menu paths may differ slightly.

Steps to log in:

  1. Open your browser and type in the address bar 192.168.0.1 or 192.168.1.1 (less often) 192.168.8.1 For Xiaomi). If the page doesn't open, look at the IP on the sticker on the back of the router.
  2. Enter your login and password (usually by default admin/admin or admin/password from the sticker).
  3. Go to the section with a list of connected devices. Paths for popular brands:
    • TP-Link: Wireless → Wireless Statistics or DHCP → DHCP Clients List
    • ASUS: Network Map → Devices or Local Network → DHCP Server
    • Keenetic: Devices → Device List
    • Xiaomi: Devices → Connected devices
    • Zyxel: Network → Local Network → DHCP Clients

In the list you will see:

  • 🖥️ IP address devices (for example, 192.168.0.103).
  • 🔤 MAC address (unique identifier, looks like 00:1A:2B:3C:4D:5E).
  • 📱 Device name (if it broadcasts it, for example, iPhone-12-Pro or DESKTOP-5T7G8H9).
  • 📶 Connection type (Wi-Fi or cable).

How to distinguish your devices from others?

  • 🔍 Compare MAC addresses with your gadgets (how to find out the MAC address - see the next section).
  • 🕵️‍♂️ Look at manufacturer in the MAC address (the first 3 pairs of characters). For example:
    • 00:1A:79Samsung
    • 3C:5A:B4Google (including Nest And Android)
    • 78:31:C1Apple
    • 28:CF:DAXiaomi

    A complete list of manufacturers can be found on the website MAC Vendors.

  • ⏱️ Please note connection timeIf the device is active at night, when everyone is sleeping, it's suspicious.
⚠️ Attention: Some routers (eg. Keenetic) show not only connected ones, but also blocked devices. Don't confuse them! Look for active connections marked Online or Connected.

☑️ What to do if you find an unknown device

Completed: 0 / 4

3. Method 2: How to find out the MAC address of your devices (to avoid blocking them)

Before blocking unnecessary devices, make sure you don't cut off your own devices from the network. Here's how to identify them. MAC addresses:

On Windows 10/11:

  1. Click Win + R, enter cmd and press Enter.
  2. Enter the command:
    ipconfig /all
  3. Find the block Wi-Fi Wireless LAN Adapter and a line Physical address - this is MAC.

On macOS:

  1. Open System Preferences → Network.
  2. Select Wi-Fi → Additional.
  3. On the tab Equipment find MAC address.

On Android:

  1. Open Settings → About phone → General information (or Phone details).
  2. Find Wi-Fi MAC address (on some models Samsung path: Settings → Connections → Wi-Fi → ⚙️ → MAC Address).

On iPhone/iPad:

  1. Go to Settings → Wi-Fi.
  2. Tap the blue icon i near your network.
  3. The MAC address is specified in the line Wi-Fi address.

Compare the resulting addresses with the list in your router. If a device on the network isn't yours and you don't know who it belongs to, you can safely block it.

4. Method 3: Real-time traffic monitoring (for advanced users)

If you want to not only see the connected devices, but also understand, how much traffic do they consume, use the router's built-in tools or third-party programs.

Built-in router tools:

Some models support detailed traffic statisticsLook for sections like:

  • TP-Link: Bandwidth Control → View Usage
  • ASUS: Traffic Analysis → Bandwidth Monitoring
  • Keenetic: Statistics → Traffic

Sample report from Keenetic:

Device MAC address Uploaded (MB) Sent (MB) Total (MB)
iPhone-13-Pro A4:83:E7:... 1 245 389 1 634
DESKTOP-PC 7C:DD:90:... 3 456 1 203 4 659
Unknown-Device 00:1A:2B:... 12 345 8 765 21 110

In this example, an unknown device is consuming 4 times more traffic than all the others combined - a clear sign of a "parasite".

Third-party programs for analysis:

If your router does not support detailed statistics, install one of the following programs on your computer:

  • 🖥️ Wireshark (for advanced users) - analyzes data packets on the network.
  • 📊 GlassWire — shows traffic by device in real time with graphs.
  • 🛡️ NetCut - allows not only monitoring, but also block devices directly from the interface.
⚠️ Attention: Programs like NetCut They may be recognized by antivirus software as potentially dangerous because they interfere with network traffic. Only use them from official sources!

5. Method 4: Using mobile apps to analyze Wi-Fi

If you find it inconvenient to access the router admin panel from your computer, use mobile applicationsThey scan the network and display all connected devices with traffic details.

Top 3 apps for Android And iOS:

  • 📱 Fing — identifies devices, their manufacturers, open ports, and even vulnerabilities. A free version with limitations is available.
  • 🔍 WiFi Guard — specializes in searching for "foreign" devices and notifies about new connections.
  • 🛡️ NetScan — scans the network and displays MAC addresses, IP and host names.

How to use Fing:

  1. Install the application and open it.
  2. Click Scan — the program will find all devices on your network.
  3. Tap on an unknown device to see details: MAC, manufacturer, open ports.
  4. If the device is suspicious, click Block (does not work on all routers).

Sample report from Fing:

Device: Unknown

MAC: 00:1A:2B:3C:4D:5E

Manufacturer: Shenzhen Bilian Electronic (Chinese OEM, often used in cheap gadgets)

IP: 192.168.0.105

Open ports: 80, 443, 8080 (maybe it's a camera or smart device)

What should I do if the app shows "unknown device" from Apple or Samsung?

It could be a smart speaker (for example, Amazon Echo), a fitness tracker, or even a wireless keyboard. Check if you've recently connected any new gadgets to the network.

6. Method 5: Blocking devices via a router (by MAC or IP)

Once you have found the "parasite", you need to disable and blockso it doesn't reconnect. There are two ways to do this:

MAC address blocking (the most reliable method):

  1. Log in to the router admin panel (see Method 2).
  2. Find the section MAC Filtering (or MAC address filtering, Access control).
  3. Add the MAC address of the unwanted device to blacklist.
  4. Save the settings and reboot the router.

Examples of paths for popular routers:

  • TP-Link: Wireless → Wireless MAC Filtering
  • ASUS: Wireless Network → MAC Filter
  • Keenetic: Devices → Access Rules

Blocking by IP address (less reliable, as the IP may change):

  1. Find the section in the admin panel Firewall or Firewall.
  2. Add a rule to block traffic from a specific IP (for example, 192.168.0.105).
  3. Apply settings.

How to check if your device is locked:

  • 🔄 Reboot your router.
  • 🔍 Check the list of connected devices - the "parasite" should disappear.
  • 📈 Make sure your internet speed has returned to normal.
⚠️ Attention: If you block a device by MAC, and it is connected via cable (for example, Smart TV If you're using a neighbor, blocking may not work. In this case, disable physical access to the router ports or change the Wi-Fi password.

7. Method 6: Change your password and other security settings

If you find “extra” devices, it’s not enough to just block them – you need to protect the network from repeated hacksHere's what to do:

1. Change your Wi-Fi password:

  • 🔐 Use complex password at least 12 characters long, including letters, numbers, and special characters. Example: W7f#k9P2$mQ1!
  • 🚫 Do not use personal information (dates of birth, names, phone numbers).
  • 🔄 Change your password every 3-6 months.

2. Set up encryption:

  • 🔒 In the router's admin panel, select the encryption type WPA3-PSK (or WPA2-PSK, If WPA3 (not supported).
  • 🚫 Disable obsolete protocols WEP And WPA - They are easy to break.

3. Hide SSID (do not show network name):

This won't protect you from experienced hackers, but it will reduce the number of accidental connections:

  1. Find it in the admin panel Wireless Settings (or Wi-Fi settings).
  2. Disable the option Enable SSID Broadcast (or Broadcast SSID).
  3. Save the settings - now the network will not be visible in the list of available ones; you can only connect to it manually.

4. Update your router firmware:

Outdated software contains vulnerabilities that hackers exploit. Update your firmware:

  • TP-Link/ASUS: System Tools → Firmware Upgrade
  • Keenetic: General Settings → Update
  • Xiaomi: Status → Firmware Update
⚠️ Attention: After changing the password or hiding the SSID, all your devices will turn off automatically From Wi-Fi. Prepare your new connection details in advance.

8. Method 7: Using a guest network to restrict access

If you frequently provide Wi-Fi access to guests but don't want to risk your main network, set up guest networkIt works separately, with its own password and restrictions.

Benefits of a guest network:

  • 🔐 Guests won't see your main devices (printers, NAS, smart home).
  • 📈 You can limit speed or traffic for guests.
  • 🕒 You can set it to turn off automatically after a certain time.

How to set up a guest network:

  1. Find the section in the router admin panel Guest Network (or Guest network).
  2. Enable the guest network and give it a unique name (for example, MyGuestWiFi).
  3. Set a separate password (it can be simpler than for the main network).
  4. Set up restrictions:
    • 🕐 Working hours (for example, from 9:00 to 22:00).
    • 📊 Traffic limit (e.g. 1 GB per day).
    • 📶 Speed ​​limitation (e.g. 10 Mbps).
  • Save the settings and connect to the guest network from your phone to test its operation.
  • Example of guest network settings on ASUS RT-AX58U:

    Parameter Meaning
    Network name (SSID) Guest_Home_5G
    Password Welcome123!
    Speed ​​Limit 10 Mbps
    Access time 09:00–22:00
    Isolation of clients Enabled (guests will not see each other)

    FAQ: Frequently Asked Questions about Wi-Fi "Parasites"

    ❓ Is it possible to find out which device is connected by its MAC address?

    Yes, the first 3 pairs of characters of the MAC address indicate the manufacturer. For example:

    • B8:27:EBRaspberry Pi
    • 3C:22:FBApple (iPhone, MacBook)
    • 78:11:DCSamsung (smartphones, televisions)

    A complete list of manufacturers can be found on the website MAC Vendors.

    ❓ What should I do if an unknown device reappears after being blocked?

    This means that:

    1. Device spoofs MAC address (rare, but possible).
    2. Someone hacked your router and reset the settings.
    3. Do you have password leak (for example, the guest saved it on his phone).

    Solution:

    • Change the password for your Wi-Fi and router admin panel.
    • Update your router firmware.
    • Turn on MAC address filtering in "allow only specified" mode.
    ❓ Can my neighbor connect to my Wi-Fi if I hide the SSID?

    Yes, hiding SSID does not protect from experienced users. They can:

    • Find the network by scanning the air (programs like Wireshark).
    • Connect manually, knowing the network name and password.

    Hiding the SSID is only useful to reduce the number of accidental connections.

    ❓ How do I know if my device isn't just connected, but actually consuming my data?

    Signs of active traffic consumption:

    • The device is transmitting gigabytes of data per hour (visible in the router statistics).
    • Its operating time coincides with peak network loads.
    • It uses non-standard ports (for example, 8080, 3389 - often used for remote access).

    For accurate analysis, use programs like GlassWire or Wireshark.

    ❓ Is it possible to see which websites an unknown device is visiting through a router?

    On most home routers No such a function. However:

    • Some models ASUS with firmware Asuswrt-Merlin support log of visited sites.
    • It can be customized DNS redirection for service like OpenDNS, which keeps logs.
    • For complete control you need industrial router (For example, MikroTik) or a separate server with Pi-hole.

    It is easier for ordinary users to change the password and lock the device.