Many users are familiar with the situation where an unfamiliar name appears in the list of available networks and the internet speed drops. The question often arises: how to find out where the Wi-Fi is coming from and whether someone else has connected to your router. It could be a signal from a neighbor extending beyond their apartment, or a device you forgot to turn off in another room. Understanding the physics of radio wave propagation and using specialized software allows you to not just guess, but pinpoint the location of the radiation source.
In today's dense urban environment, the airwaves are saturated with dozens of overlapping signals. Interference Reflections from walls and radio waves create a complex picture, making it virtually impossible to pinpoint the source with the naked eye. However, with the right tools, you can turn your smartphone or laptop into an effective direction finder. It's important to understand that standard operating system tools often hide the technical details needed for in-depth analysis.
In this article, we'll look at professional diagnostic methods that will help you identify the signal source. We'll cover working with MAC addresses, signal strength analysis (RSSI), and the use of graphical interfaces for broadcast visualization. This knowledge is essential not only for protecting your own network but also for properly planning your home infrastructure to avoid channel conflicts and ensure a stable connection.
Analyzing the list of available networks using standard tools
The easiest way to begin an investigation is to carefully examine the list of available connections in the operating system. In Windows or macOS, the standard interface displays the network name (SSID) and signal strength, but it hides important technical parameters. By clicking on the network properties, you can often see the channel frequency and security protocol, which already provides a preliminary clue. If the network name matches your router's name, but the signal strength is unusual, this may indicate the presence of a second router or repeater.
However, the standard list is often misleading. The operating system may combine several access points with the same name (for example, Mesh systems) into one logical network. To understand where exactly the signal is coming from at a given moment, you need to look at the physical address of the device. In the Windows command line, the command netsh wlan show interfaces will show the BSSID (MAC address of the access point) you're currently connected to. This is a unique identifier that can't be hidden during scanning.
⚠️ Warning: Do not rely solely on the network name (SSID), as it can easily be changed to anything else, including popular brand names like "Free_WiFi" or "Police_Monitoring", to confuse your neighbors.
For a more in-depth analysis in Windows, you can use the command netsh wlan show networks mode=bssidIt will display a list of all visible networks, broken down by access point. You'll see exactly how many routers or access points are hidden behind a single name. If you see multiple entries with the same SSID but different MAC addresses and signal strengths, this means there are multiple devices operating in the air, and you need to determine which one is the primary router and which is just an echo or neighboring router.
Using specialized Wi-Fi scanners
To get a detailed picture of what's happening on the air, you need to use specialized software. Analyzer programs such as inSSIDer, WiFi Analyzer or AirPort Utility, provide a graphical representation of radio channels. They show not only network names but also channel width, noise level, and precise signal strength in dBm. This allows you to understand where the strongest signal is coming from and what frequency it operates on.
The key parameter here is RSSI (Received Signal Strength Indicator). This value is negative, and the closer it is to zero, the stronger the signal. For example, -40 dBm means the source is very close, perhaps in the next room, while -90 dBm indicates the router is far away or behind several concrete walls. By moving around the apartment with the scanner running and observing the changing numbers, you can triangulate the physical location of the radiation source.
☑️ Network security check
Many modern analyzers feature a "map" or compass mode that visually indicates the direction of the signal source. This is especially useful in offices or apartment buildings. As you slowly walk down the hallway, an arrow on your smartphone's screen shows where the signal strength increases. This can help you identify not only unauthorized routers, but also unused access points or even hidden Wi-Fi cameras.
Identifying a device by MAC address
Each network equipment has a unique factory identifier - MAC addressThe first six characters of this address (OUI - Organizationally Unique Identifier) indicate the device manufacturer. Knowing the manufacturer can help you determine the device type. For example, if you see a device from Espressif, it's most likely some kind of smart light bulb or sensor. If the address belongs to Apple or Samsung, it could be a phone or a tablet.
There are online databases and utilities that allow you to find a MAC address. By entering the first three pairs of characters (for example, 00:1A:2B), you'll receive the manufacturer's name. This helps distinguish your personal laptop from an unknown device. If you see a device from an unknown manufacturer in the list of connected clients that isn't in your apartment, this is cause for concern and a password change.
| Manufacturer (OUI) | Probable device | Risk of invasion |
|---|---|---|
| Intel, Realtek | Laptop, PC with Wi-Fi adapter | Tall (if not yours) |
| Apple, Samsung, Xiaomi | Smartphone, tablet, TV | Middle (guest or neighbor) |
| TP-Link, D-Link, Asus | Router, repeater | High (foreign network) |
| Espressif, Tuya | Smart socket, lamp | Low (IoT device) |
It is worth considering that modern operating systems (iOS 14+, Android 10+) use the function by default MAC address randomization To protect your privacy, this means that when connected to your network, your phone may appear as a random device with an unknown manufacturer. Therefore, the absence of a known brand in the MAC address doesn't always indicate a hacker; it could be your own smartphone hiding its identity.
Find hidden networks and devices
Some users or administrators hide the network name (SSID Broadcast disabled) to make it invisible to regular users. However, it's impossible to hide the fact that a radio signal is being transmitted. Wi-Fi scanners see such networks as...
Tools like Aircrack-ng (for advanced Linux users) or the "Deauth" feature in some mobile apps (use with caution and only on your own network!). When a hidden device attempts to reconnect or respond to a request, it reveals its real name. This allows you to identify the origin of the Wi-Fi, even if the owner has tried to disguise it.
Is it possible to completely hide a Wi-Fi router?
It's impossible to completely hide your wireless signal. Even if you disable the broadcast name (SSID), the router continues to send beacon frames, which are visible to spectrum analyzers. You can only hide the name from the average user, not from a specialist.
It's also worth checking for any strange devices on your local network through your router's admin panel. Go to the section Status or Client listAll devices assigned an IP address are displayed there. If you see a computer named "USER-PC" that you don't recognize, it means someone has access to your network. In this case, analyzing the MAC address becomes a critical step in identifying the intruder.
Physical search for the signal source
Once software methods have detected the presence of a foreign device, you can move on to a physical search. Radio waves in the 2.4 GHz and 5 GHz bands penetrate obstacles differently. The 2.4 GHz signal bypasses walls better but is more susceptible to interference from microwaves and Bluetooth devices. The 5 GHz signal attenuates faster but provides a more accurate indication of the source's proximity. If the signal strength drops sharply when you step into the hallway, the source is in the room you just left.
Use the "warm-cold" method. Turn on a signal strength app on your smartphone (such as WiFi Analyzer) and slowly walk around the perimeter of your apartment. Monitor the dBm readings. The access point is located in the corner where the reading is highest (for example, -35 dBm). It often turns out that the "neighbor's" Wi-Fi is coming from a ventilation vent or through a thin partition with a stairwell, where the ISP's shared router is located.
In apartment buildings, problems are often caused by neighbors' old routers operating at maximum power on Channel 1. Their signal can penetrate several floors. If you notice that the main noise is coming from below or above, negotiate with your neighbors about changing the channel. In today's dense airwaves, channel bandwidth usage is crucial. 20 MHz instead of 40/80 MHz often gives a more stable result than chasing high speed.
Network protection and intrusion prevention
Once you've identified the source of the Wi-Fi and confirmed it's not your device, you need to take action. The most effective protection is using an encryption protocol. WPA3 Or at least WPA2-AES. Older WEP and WPA(TKIP) protocols can be cracked in a few minutes, even by a novice. Make sure your Wi-Fi password contains more than 12 characters, including upper- and lower-case letters and numbers.
MAC address filtering offers an additional layer of security. You can create a "whitelist" in your router settings, containing only your devices. Even if an attacker learns your password, they won't be able to connect, as their physical address will be blocked. However, keep in mind that MAC addresses can be spoofed (cloned), so this isn't absolute protection, but merely an additional barrier.
⚠️ Note: Router interfaces and app functionality are constantly being updated. The location of menu items may vary depending on the firmware version and device model. If you don't find the function you're looking for, consult the manufacturer's official instructions.
Update your router firmware regularly. Manufacturers patch vulnerabilities that allow hackers to access settings or intercept traffic. Also, disable this feature. WPS (Wi-Fi Protected Setup), as it is one of the most vulnerable entry points into the network. After completing all settings, save the configuration and reboot the device.
Frequently Asked Questions (FAQ)
Can my neighbor see what websites I visit on my Wi-Fi?
If your traffic is unstructured (using HTTP instead of HTTPS), then technically the router owner can see the addresses of the websites you visit. However, modern websites use HTTPS, encrypting page content. A neighbor can only see the domain name (for example, that you're on youtube.com), but not the specific video or search queries.
Why does my internet speed drop even when no one is connected to the Wi-Fi?
Speeds can drop due to radio channel congestion from neighboring routers, even if they aren't connected to yours. Signal interference forces your device to request retransmission of data packets. Background updates on your devices or issues with your ISP can also be the cause.
How do I know how many devices are connected to my Wi-Fi right now?
Access your router's web interface (usually 192.168.0.1 or 192.168.1.1). The number of active connections is displayed in the "Client List," "Wireless Status," or "DHCP Client List" sections. Mobile apps from router manufacturers (Keenetic, TP-Link Tether) also display this information in real time.
Does using a microwave affect Wi-Fi speed?
Yes, microwave ovens operate on the 2.4 GHz frequency, like most Wi-Fi networks. When turned on, a microwave creates strong interference that can completely block the Wi-Fi signal within a radius of several meters. To minimize the impact, use the 5 GHz band or move the router away from the kitchen.