Slow internet speeds and constant lag when watching videos are often annoying, but few people consider that the problem might not be your ISP. In most cases, the culprit is third-party devices that have connected to your wireless network without your knowledge. If neighbors or passersby have access to your router, they're not only stealing your bandwidth but also posing a security threat to your personal data.
Modern routers such as Keenetic, TP-Link or Asus, have built-in security mechanisms, but they aren't always configured as securely by default. An attacker only needs to know your Wi-Fi password to access your local network, which could include your computers, printers, and smart light bulbs. That's why regularly checking the list of connected clients is a basic digital security practice.
In this article, we'll explore how to use specialized software and router settings to identify uninvited guests. You'll learn how to distinguish system devices from rogue devices and discover the steps to immediately block intruders.
Symptoms of unauthorized access
The first sign that someone else is using your Wi-Fi is a sudden drop in connection speed. If your data plan offers high speeds, but pages load slowly or videos buffer during hours when the provider isn't performing maintenance, you should be wary. This is especially noticeable in the evening, when neighbors return home and begin using the internet actively.
Another warning sign is the blinking wireless light on your router. When all your devices are turned off or in sleep mode, the light WLAN or Wi-Fi It should be either solid or blinking slowly. Active and frequent blinking indicates data transfer by other devices.
You should also pay attention to any strange behavior on your devices. For example, if a smart speaker suddenly stops responding to commands or your printer isn't detected by your computer, there may be an IP conflict on the network. This occurs when the router attempts to assign the same address to two different devices, one of which is not yours.
⚠️ Attention: Don't rush to blame your neighbors for isolated slowdowns. First, check whether background apps are updating on your smartphone or whether anyone in the household is downloading large files.
- 📉 A sharp drop in download and upload speed at different times of the day.
- 💡 Active blinking of the Wi-Fi indicator when the devices are turned off.
- 🔌 Periodic connection breaks on your gadgets.
- 🔒 Unable to access router settings (password may have been changed).
Using network scanners for PCs and smartphones
The fastest and most effective way to see everyone on your network right now is to use specialized software. Scanners analyze traffic and display a list of all active MAC addresses and IP addresses. For a computer, a utility like Wireless Network Watcher or Angry IP ScannerThey run on Windows, macOS, and Linux without requiring in-depth knowledge of network architecture.
To check from your smartphone, which is always at hand, you can use applications Fing or Network ScannerOnce launched, the app will instantly scan the range and display a list of devices. You'll see not only IP addresses, but also often the manufacturer's name (e.g., Samsung, Apple, Xiaomi), which greatly simplifies identification.
It's important to interpret the data received correctly. The list will display your phones, TVs, laptops, and IoT devices (smart plugs, vacuum cleaners). To determine if there are any "extra" devices, you need to know the exact number of your gadgets. If you count five devices, and the program shows seven, then two of them don't belong to you.
Why are some devices called "Unknown"?
Some gadgets or operating systems may hide their network name or fail to transmit it correctly. In this case, the program displays them as Unknown or Unknown Device. In this case, you should use the MAC address and network card manufacturer as a reference.
Analyzing the client list in the router's web interface
The most reliable information will be provided by the router itself. Access to the control panel is done through a browser. You need to enter the router's IP address in the address bar, which is usually located on a sticker on the bottom of the device (often 192.168.0.1 or 192.168.1.1). After entering your login and password (by default, often admin/admin) the settings menu will open.
Interfaces vary by manufacturer, but the search logic is the same. Find the section related to your wireless network or connection status. Look for tabs with names like "Status," "Network Map," "Wireless," "WLAN Status," or "Client List." This displays a table of all active connections in real time.
In this section you will be able to see not only current users, but also connection history (in more advanced models, such as MikroTik or Keenetic). This allows you to track exactly when an unknown device connected to the network, even if it is currently offline.
| Router brand | Menu section | Tab name | Peculiarities |
|---|---|---|---|
| TP-Link | Wireless | Wireless Statistics | Shows MAC addresses and activity time |
| Asus | Network Map | Clients | User-friendly graphical interface with names |
| D-Link | Status / Device Info | Wireless Clients | Basic list of MAC addresses |
| Keenetic | Client list | Home network | Detailed information and access control |
| Xiaomi | Common Settings | Connected Devices | A simple list with blocking options |
If you find an unfamiliar device, don't panic. Modern routers allow you to block it directly from this menu by clicking the "Block" button or adding it to the "Blacklist." However, simply blocking it is a temporary measure if your Wi-Fi password remains weak.
☑️ Check via web interface
Identifying devices by MAC address
The key identifier of any network equipment is MAC address. This is a unique code consisting of six pairs of hexadecimal numbers (for example, A4:5E:60:C2:11:00), which is assigned to a network card during manufacturing. The first three pairs of characters (OUI) are used to identify the device's manufacturer.
There are online databases and OUI directories where you can enter the first three blocks of a suspicious device's MAC address. If the address begins with a prefix belonging to the company Huawei, and you don't have equipment of this brand, then it's highly likely your neighbor's device. However, be careful: some manufacturers use third-party network modules, and the brand name may not match the gadget's name.
For accurate identification, make a list of the MAC addresses of all your devices in advance. Write them down in a notepad or take screenshots. It takes 5 minutes, but will save you hours of frustration in the future. It's often a good idea to assign descriptive names to the router's client list (e.g., "Ivan Phone," "TV Living Room") to avoid confusion.
Methods of protection and blocking uninvited guests
Once the intruder is identified, it's important not only to disconnect them but also to prevent them from reconnecting. The simplest, yet most drastic, method is to change your Wi-Fi password. Changing the security key will disconnect all devices, forcing you to re-enter the new password on your devices. This is guaranteed to kick your neighbors off the network.
A more flexible tool - MAC address filtering (MAC Filtering). In your router settings, you can create a "White List" (Allow List) that only includes the MAC addresses of your devices. In this mode, the router will ignore any connection attempts from devices whose addresses aren't on the list, even if they know the correct Wi-Fi password.
It is also recommended to disable the function WPSThis technology allows you to connect to a network without entering a password (for example, by pressing a button on the router), but it has vulnerabilities that hackers and savvy neighbors can exploit to brute-force the key. Disabling WPS significantly increases the level of perimeter security.
⚠️ Attention: When enabling MAC address filtering, be extremely careful. If you mistype one digit when entering your device's address, you'll lock yourself out and lose network access.
- 🔑 Change your password to a complex one (at least 10 characters, letters and numbers).
- 🛡️ Enable MAC address filtering in "Allow only listed" mode.
- 🚫 Disable WPS in wireless settings.
- 📡 Hide the network name (SSID) if you want increased privacy.
Prevention: How to Permanently Block Access
To prevent a repeat incident, it's important to understand how your neighbors might have learned your password. Passwords are often written down in visible places, dictated to guests, or used overly simple combinations like "12345678." Using the default password found on the router's factory sticker is also unsafe, as this information is easily accessible if an intruder has physical access to the device (for example, in a building's entryway).
It's recommended to update your security key regularly, every few months. This may seem inconvenient, but in the age of smart homes, it's a necessary measure. Also, keep an eye on your router firmware: manufacturers regularly patch security holes that could allow password theft or access to the admin panel.
If you live in a densely populated apartment building, your router's range may extend far beyond your apartment. In such cases, it might be a good idea to reduce the transmitter power in the settings (Transmit Power). The signal will be strong in your apartment, but behind the wall its strength will be insufficient for a stable connection, which will make your network unattractive to "freeloaders."
Frequently Asked Questions (FAQ)
Can my neighbor see my files if he is connected to Wi-Fi?
Theoretically, yes, if network discovery and file sharing are enabled on your local network. In modern operating systems (Windows 10/11, macOS), when connecting to a new network, the system automatically selects the "Public Network" profile, which hides your computer from others. However, it's not worth the risk—an intruder on the network is always a threat.
Will my neighbor change his IP address if I block him by MAC?
No, MAC address blocking is effective precisely because the MAC address is hardcoded into the device's network card and is difficult for the average user to change. Even if they change their IP address, the unique identifier for the device remains the same, and the router will block it again.
Why is the device "Unknown" in the aparece client list?
This is normal. Some devices (cameras, smart plugs, older phones) don't transmit their hostname when connecting. The router only sees the technical address. In such cases, you should rely on the network card manufacturer (the first six digits of the MAC address) and exclude brands you recognize.
How can I find out who's using my Wi-Fi if I forgot my router password?
If you haven't changed the router's admin password, try the default combinations (admin/admin). If they don't work, you'll need to reset the router using the reset button on the router. This will restore the router to its factory settings, reset the Wi-Fi password to the one on the sticker, and allow you to set a new one.