Have you noticed that your internet has become slow for no apparent reason? Video on YouTube Is your computer loading intermittently, online games are lagging, and your file download speed has dropped dramatically? Most likely, your Wi-Fi third-party devices have connected—neighbors, guests who forgot to disconnect, or even hackers using your traffic for mining or DDoS attacks. According to Kaspersky, every fifth router in Russia has at least one unauthorized connection.
In this article you will learn how identify "parasites" on your network, identify which device is consuming traffic, and block it permanently. We'll cover methods for routers. TP-Link, ASUS, Keenetic, Xiaomi and universal methods that work on any equipment. You'll also learn how to distinguish legitimate devices from rogue ones and protect your network from repeat hacks.
1. The first signs of a traffic leak: when to sound the alarm
Before you rush to check the connected devices, make sure that the problem is really in them. Here key symptoms, indicating unauthorized use of your Wi-Fi:
- 📉 A sharp drop in speed at normal times (for example, in the evening), although the tariff has not changed.
- 🔄 The router is overheating or frequently reboots without your intervention.
- 📡 Activity indicator The light on the router is blinking even when all your devices are turned off.
- 💾 Traffic in your provider's personal account exceeds your actual consumption (for example, at night when everyone is sleeping).
- 🔒 Unknown devices appear in the list of connected gadgets (more on this below).
If at least two or three of these points ring a bell, it's time to take action. But first, rule out other causes:
- 🔌 Check if you are connected to the router via cable devices (for example, Smart TV or game console), which may consume traffic in the background.
- 📱 Make sure that your smartphones or laptops are not running background updates (Windows, macOS, Android) or torrent clients.
- 🌐 Try connecting to a different Wi-Fi network (for example, from your phone) and check the speed. If it's normal, the problem is definitely with your network.
⚠️ Attention: If you use public Wi-Fi (for example, in a cafe or hotel), all the methods described are useless - the network administrator can see your traffic, and there will be hundreds of connected devices. This instruction is only for home and office routers.
2. Method 1: Viewing the list of devices through the router's web interface
The most reliable way to find out who is connected to your Wi-Fi is to go to router admin panelThe instructions are universal for most models, but the menu paths may differ slightly.
Steps to log in:
- Open your browser and type in the address bar
192.168.0.1or192.168.1.1(less often)192.168.8.1For Xiaomi). If the page doesn't open, look at the IP on the sticker on the back of the router. - Enter your login and password (usually by default
admin/adminoradmin/password from the sticker). - Go to the section with a list of connected devices. Paths for popular brands:
- TP-Link:
Wireless → Wireless StatisticsorDHCP → DHCP Clients List - ASUS:
Network Map → DevicesorLocal Network → DHCP Server - Keenetic:
Devices → Device List - Xiaomi:
Devices → Connected devices - Zyxel:
Network → Local Network → DHCP Clients
- TP-Link:
In the list you will see:
- 🖥️ IP address devices (for example,
192.168.0.103). - 🔤 MAC address (unique identifier, looks like
00:1A:2B:3C:4D:5E). - 📱 Device name (if it broadcasts it, for example,
iPhone-12-ProorDESKTOP-5T7G8H9). - 📶 Connection type (Wi-Fi or cable).
How to distinguish your devices from others?
- 🔍 Compare MAC addresses with your gadgets (how to find out the MAC address - see the next section).
- 🕵️♂️ Look at manufacturer in the MAC address (the first 3 pairs of characters). For example:
00:1A:79— Samsung3C:5A:B4— Google (including Nest And Android)78:31:C1— Apple28:CF:DA— Xiaomi
A complete list of manufacturers can be found on the website MAC Vendors.
- ⏱️ Please note connection timeIf the device is active at night, when everyone is sleeping, it's suspicious.
⚠️ Attention: Some routers (eg. Keenetic) show not only connected ones, but also blocked devices. Don't confuse them! Look for active connections markedOnlineorConnected.
☑️ What to do if you find an unknown device
3. Method 2: How to find out the MAC address of your devices (to avoid blocking them)
Before blocking unnecessary devices, make sure you don't cut off your own devices from the network. Here's how to identify them. MAC addresses:
On Windows 10/11:
- Click
Win + R, entercmdand pressEnter. - Enter the command:
ipconfig /all - Find the block
Wi-Fi Wireless LAN Adapterand a linePhysical address- this is MAC.
On macOS:
- Open
System Preferences → Network. - Select
Wi-Fi → Additional. - On the tab
EquipmentfindMAC address.
On Android:
- Open
Settings → About phone → General information(orPhone details). - Find
Wi-Fi MAC address(on some models Samsung path:Settings → Connections → Wi-Fi → ⚙️ → MAC Address).
On iPhone/iPad:
- Go to
Settings → Wi-Fi. - Tap the blue icon
inear your network. - The MAC address is specified in the line
Wi-Fi address.
Compare the resulting addresses with the list in your router. If a device on the network isn't yours and you don't know who it belongs to, you can safely block it.
4. Method 3: Real-time traffic monitoring (for advanced users)
If you want to not only see the connected devices, but also understand, how much traffic do they consume, use the router's built-in tools or third-party programs.
Built-in router tools:
Some models support detailed traffic statisticsLook for sections like:
- TP-Link:
Bandwidth Control → View Usage - ASUS:
Traffic Analysis → Bandwidth Monitoring - Keenetic:
Statistics → Traffic
Sample report from Keenetic:
| Device | MAC address | Uploaded (MB) | Sent (MB) | Total (MB) |
|---|---|---|---|---|
| iPhone-13-Pro | A4:83:E7:... | 1 245 | 389 | 1 634 |
| DESKTOP-PC | 7C:DD:90:... | 3 456 | 1 203 | 4 659 |
| Unknown-Device | 00:1A:2B:... | 12 345 | 8 765 | 21 110 |
In this example, an unknown device is consuming 4 times more traffic than all the others combined - a clear sign of a "parasite".
Third-party programs for analysis:
If your router does not support detailed statistics, install one of the following programs on your computer:
- 🖥️ Wireshark (for advanced users) - analyzes data packets on the network.
- 📊 GlassWire — shows traffic by device in real time with graphs.
- 🛡️ NetCut - allows not only monitoring, but also block devices directly from the interface.
⚠️ Attention: Programs like NetCut They may be recognized by antivirus software as potentially dangerous because they interfere with network traffic. Only use them from official sources!
5. Method 4: Using mobile apps to analyze Wi-Fi
If you find it inconvenient to access the router admin panel from your computer, use mobile applicationsThey scan the network and display all connected devices with traffic details.
Top 3 apps for Android And iOS:
- 📱 Fing — identifies devices, their manufacturers, open ports, and even vulnerabilities. A free version with limitations is available.
- 🔍 WiFi Guard — specializes in searching for "foreign" devices and notifies about new connections.
- 🛡️ NetScan — scans the network and displays MAC addresses, IP and host names.
How to use Fing:
- Install the application and open it.
- Click
Scan— the program will find all devices on your network. - Tap on an unknown device to see details: MAC, manufacturer, open ports.
- If the device is suspicious, click
Block(does not work on all routers).
Sample report from Fing:
Device: Unknown
MAC: 00:1A:2B:3C:4D:5E
Manufacturer: Shenzhen Bilian Electronic (Chinese OEM, often used in cheap gadgets)
IP: 192.168.0.105
Open ports: 80, 443, 8080 (maybe it's a camera or smart device)
What should I do if the app shows "unknown device" from Apple or Samsung?
It could be a smart speaker (for example, Amazon Echo), a fitness tracker, or even a wireless keyboard. Check if you've recently connected any new gadgets to the network.
6. Method 5: Blocking devices via a router (by MAC or IP)
Once you have found the "parasite", you need to disable and blockso it doesn't reconnect. There are two ways to do this:
MAC address blocking (the most reliable method):
- Log in to the router admin panel (see Method 2).
- Find the section
MAC Filtering(orMAC address filtering,Access control). - Add the MAC address of the unwanted device to blacklist.
- Save the settings and reboot the router.
Examples of paths for popular routers:
- TP-Link:
Wireless → Wireless MAC Filtering - ASUS:
Wireless Network → MAC Filter - Keenetic:
Devices → Access Rules
Blocking by IP address (less reliable, as the IP may change):
- Find the section in the admin panel
FirewallorFirewall. - Add a rule to block traffic from a specific IP (for example,
192.168.0.105). - Apply settings.
How to check if your device is locked:
- 🔄 Reboot your router.
- 🔍 Check the list of connected devices - the "parasite" should disappear.
- 📈 Make sure your internet speed has returned to normal.
⚠️ Attention: If you block a device by MAC, and it is connected via cable (for example, Smart TV If you're using a neighbor, blocking may not work. In this case, disable physical access to the router ports or change the Wi-Fi password.
7. Method 6: Change your password and other security settings
If you find “extra” devices, it’s not enough to just block them – you need to protect the network from repeated hacksHere's what to do:
1. Change your Wi-Fi password:
- 🔐 Use complex password at least 12 characters long, including letters, numbers, and special characters. Example:
W7f#k9P2$mQ1! - 🚫 Do not use personal information (dates of birth, names, phone numbers).
- 🔄 Change your password every 3-6 months.
2. Set up encryption:
- 🔒 In the router's admin panel, select the encryption type
WPA3-PSK(orWPA2-PSK, If WPA3 (not supported). - 🚫 Disable obsolete protocols
WEPAndWPA- They are easy to break.
3. Hide SSID (do not show network name):
This won't protect you from experienced hackers, but it will reduce the number of accidental connections:
- Find it in the admin panel
Wireless Settings(orWi-Fi settings). - Disable the option
Enable SSID Broadcast(orBroadcast SSID). - Save the settings - now the network will not be visible in the list of available ones; you can only connect to it manually.
4. Update your router firmware:
Outdated software contains vulnerabilities that hackers exploit. Update your firmware:
- TP-Link/ASUS:
System Tools → Firmware Upgrade - Keenetic:
General Settings → Update - Xiaomi:
Status → Firmware Update
⚠️ Attention: After changing the password or hiding the SSID, all your devices will turn off automatically From Wi-Fi. Prepare your new connection details in advance.
8. Method 7: Using a guest network to restrict access
If you frequently provide Wi-Fi access to guests but don't want to risk your main network, set up guest networkIt works separately, with its own password and restrictions.
Benefits of a guest network:
- 🔐 Guests won't see your main devices (printers, NAS, smart home).
- 📈 You can limit speed or traffic for guests.
- 🕒 You can set it to turn off automatically after a certain time.
How to set up a guest network:
- Find the section in the router admin panel
Guest Network(orGuest network). - Enable the guest network and give it a unique name (for example,
MyGuestWiFi). - Set a separate password (it can be simpler than for the main network).
- Set up restrictions:
- 🕐 Working hours (for example, from 9:00 to 22:00).
- 📊 Traffic limit (e.g. 1 GB per day).
- 📶 Speed limitation (e.g. 10 Mbps).
Example of guest network settings on ASUS RT-AX58U:
| Parameter | Meaning |
|---|---|
| Network name (SSID) | Guest_Home_5G |
| Password | Welcome123! |
| Speed Limit | 10 Mbps |
| Access time | 09:00–22:00 |
| Isolation of clients | Enabled (guests will not see each other) |
FAQ: Frequently Asked Questions about Wi-Fi "Parasites"
❓ Is it possible to find out which device is connected by its MAC address?
Yes, the first 3 pairs of characters of the MAC address indicate the manufacturer. For example:
B8:27:EB— Raspberry Pi3C:22:FB— Apple (iPhone, MacBook)78:11:DC— Samsung (smartphones, televisions)
A complete list of manufacturers can be found on the website MAC Vendors.
❓ What should I do if an unknown device reappears after being blocked?
This means that:
- Device spoofs MAC address (rare, but possible).
- Someone hacked your router and reset the settings.
- Do you have password leak (for example, the guest saved it on his phone).
Solution:
- Change the password for your Wi-Fi and router admin panel.
- Update your router firmware.
- Turn on MAC address filtering in "allow only specified" mode.
❓ Can my neighbor connect to my Wi-Fi if I hide the SSID?
Yes, hiding SSID does not protect from experienced users. They can:
- Find the network by scanning the air (programs like Wireshark).
- Connect manually, knowing the network name and password.
Hiding the SSID is only useful to reduce the number of accidental connections.
❓ How do I know if my device isn't just connected, but actually consuming my data?
Signs of active traffic consumption:
- The device is transmitting gigabytes of data per hour (visible in the router statistics).
- Its operating time coincides with peak network loads.
- It uses non-standard ports (for example, 8080, 3389 - often used for remote access).
For accurate analysis, use programs like GlassWire or Wireshark.
❓ Is it possible to see which websites an unknown device is visiting through a router?
On most home routers No such a function. However:
- Some models ASUS with firmware Asuswrt-Merlin support log of visited sites.
- It can be customized DNS redirection for service like OpenDNS, which keeps logs.
- For complete control you need industrial router (For example, MikroTik) or a separate server with Pi-hole.
It is easier for ordinary users to change the password and lock the device.