How to view a list of devices connected to your Wi-Fi: all methods

Unauthorized devices on your Wi-Fi network are one of the main causes of slow internet, unauthorized access to personal data, and even cyberattacks. According to research Kaspersky 2023, every fifth router Every home network has at least one unknown device connected. But how can you identify them? The methods depend on your router model, your device's operating system, and even whether you have access to the router's admin panel.

Many users mistakenly believe that checking the list of devices requires knowing the Wi-Fi password or having physical access to the router. In fact, there are methods for obtaining this information. even without entering the router settings — through mobile apps, specialized utilities, or traffic analysis. However, these methods have limitations: they will not reveal hidden devices (for example, those with a disabled ARP-protocol) and may not work in networks with enabled AP Isolation.

In this article we will look at all current methods — from standard (via the router’s web interface) to advanced (using Wireshark And Angry IP Scanner). We'll pay special attention to the nuances: why some devices may not appear in the list, how to distinguish a legitimate gadget from someone else's, and what to do if you detect a suspicious connection.

1. Checking via the router's web interface (the most reliable method)

The router's web interface is main tool for monitoring connected devices. It shows not only IP- And MAC-addresses, but also activity history, traffic consumption and even models of some gadgets (if they support LLTD or UPnP). However, access to it requires knowledge of the login/password from the admin panel - usually this is a combination admin/admin or indicated on the router sticker.

The instructions are universal for most models, but the menu item layout may vary. For example, in routers TP-Link Archer C6 the list of devices is in Basic Setup → Wireless → Wireless Statistics, and in ASUS RT-AX88U - V Network Map → ClientsBelow is a table with paths for popular brands:

If you can't find the section you need, use the settings search (usually the magnifying glass icon in the upper right corner). In routers with firmware OpenWRT or DD-WRT The list of devices is available via Status → Wireless or a team iw dev wlan0 station dump in the terminal.

⚠️ Attention: In some routers (for example, Huawei HG8245H) the list of devices is hidden behind additional authorization. If after entering the login/password a request appears for PPPoE- provider data is normal: enter it or contact support.

2. Mobile apps for Wi-Fi monitoring

If you don't have access to the router's admin panel (for example, you are connected to someone else's network with permission), you can use specialized applicationsThey scan the local network and display all active devices, but have limitations:

• 📱 Devices in sleep mode or with the power off are not visible ARP.
• 🔒 They don't show MAC-addresses in networks with client isolation enabled (AP Isolation).
• ⚡ Requires superuser rights (root) on Android for advanced scanning.

Best apps for Android And iOS:

• 🔍 Fing (free, premium version available) - shows IP, MAC, the device manufacturer (by OUI), ports, and vulnerabilities. Maintains scan history.
• 📊 NetScan (iOS) - visualizes the network as a graph, identifies device types (smartphone, TV, camera).
• 🛡️ WiFi Guard — compares current connections with the "white list" and notifies about new devices.
• 🔗 IP Tools — includes Ping, Traceroute and a port scanner. Useful for diagnosing suspicious devices.

Example of work Fing:

1. Connect to the Wi-Fi network you want to test.
2. Launch the app and click Scan.
3. After 10-30 seconds, a list of devices will appear indicating IP, MAC, host name and manufacturer.
4. Click on a suspicious device to see details: open ports, version OS (if determined), time of last activity.

⚠️ Attention: Applications like Fing can show devices from neighboring networks if they use the same SSID (for example, in apartment buildings with the same Wi-Fi names). Always check MAC-addresses with data from the router admin panel.

3. Check from a computer (Windows, macOS, Linux)

If you have a PC or laptop connected to the network, you can scan it without any additional software, using built-in utilities or the command line. This method does not require administrator rights, but it will only show active devices (those that are currently exchanging packets with the router).

For Windows:

1. Open Command line (Win + R → enter cmd).
2. Enter the command:

   arp -a

   She will show the table ARP-cache with IP And MAC- addresses of all devices with which your PC has recently interacted.

3. To get a complete list, first ping the entire range IP-addresses of your network. For example, if the router address 192.168.1.1, execute:

   for /L %i in (1,1,254) do ping -n 1 192.168.1.%i

   Then enter again arp -a.

For macOS/Linux:

1. Open Terminal.
2. Enter the command to scan the network (replace 192.168.1.0/24 to your subnet):

   nmap -sn 192.168.1.0/24

   If nmap not installed, use:

   sudo apt install nmap # for Debian/Ubuntu
   brew install nmap # for macOS

3. For detailed information about each device:

   nmap -O 192.168.1.100

   (Where 192.168.1.100 — IP suspicious gadget).

The scan results will look like this:

Nmap scan report for 192.168.1.100
Host is up (0.045s latency).
MAC Address: 00:1A:2B:3C:4D:5E (Apple)
Nmap scan report for 192.168.1.101
Host is up (0.002s latency).
MAC Address: 00:0A:95:9D:68:1F (Xiaomi Communications)

Check the MAC address using Google search (the first 6 characters will indicate the manufacturer)

Disable it in the router's admin panel (if there is such an option)

Change your Wi-Fi password to a more complex one (at least 12 characters, with numbers and special characters)

Enable MAC address filtering (but remember: this is not a panacea for hackers)-->

4. Advanced Methods: Wireshark and Angry IP Scanner

If standard methods do not help (for example, the network uses VLAN or AP Isolation), will come in handy deep traffic analysisThe following are suitable for this:

• 🔧 Wireshark —the "gold standard" for packet sniffing. Shows all devices, even those that are not responding. ping.
• 📡 Angry IP Scanner — scans ports and identifies device types based on responses.
• 🕵️ Advanced IP Scanner - simple interface, export of results to CSV.

Wireshark instructions:

1. Download and install Wireshark from the official website.
2. Select the network interface (Wi-Fi adapter) and click Start.
3. Enter in the filter wlan.addr == [router MAC] (For example, wlan.addr == 00:11:22:33:44:55).
4. After 1-2 minutes, stop the capture and analyze the list MAC-addresses in packets DHCP or ARP.

Wireshark will even reveal devices that are hiding their presence (for example, by spoofing their MAC address or disabling multicast packets). However, this requires experience with network protocols.

For Angry IP Scanner:

1. Install and run the program.
2. Specify the range IP-addresses (for example, 192.168.1.1-192.168.1.254).
3. Click Start. After a few seconds, a list of devices with MAC, hostnames and open ports.
4. Export the results to CSV for further analysis.

⚠️ Attention: Usage Wireshark Using it on public networks (cafes, airports) can be considered a hacking attempt. Use it only on your home network!

How to determine the manufacturer by MAC address?

The first 6 characters of the MAC address (OUI) are unique to each manufacturer. For example:

- 00:1A:79 — Apple

- 00:0A:F5 — Cisco

- 78:31:C1 — Xiaomi

Check the OUI using the IEEE database: https://standards.ieee.org/products-services/oui/ or enter the first 6 characters into Google.

5. How to distinguish your device from someone else's

Finding a list of connected gadgets is half the battle. The main thing is determine which of them are legitimate and which are notHere are the key signs of "outsiders":

• 🆔 Unknown MAC address - compare the first 6 characters with the manufacturer database (see spoiler above).
• 📵 Host name missing — legitimate devices (smartphones, PCs) usually broadcast their name through mDNS or NetBIOS.
• ⚡ Suspicious activity - high traffic during non-working hours, connections to non-standard ports (for example, 4444, 3389).
• 🕒 Unusual connection time - if the device appears online at night or when you are not at home.

To create a "whitelist" of your gadgets:

1. Write it down MAC- addresses of all your devices (you can find them in the network settings on your smartphone/PC or on the device sticker).
2. Compare them with the list from the router or scanner admin panel.
3. Unknown MAC-check the addresses using a search engine or service MAC Vendors.

An example of legitimate MAC-addresses:

• 00:1A:79:XX:XX:XX — iPhone or MacBook.
• 78:31:C1:XX:XX:XX - device Xiaomi (smartphone, smart lamp).
• B0:48:7A:XX:XX:XX - technique Samsung.

If you find a suspicious device:

1. Disable it in the router admin panel (option Block or Disconnect).
2. Change your Wi-Fi password to a complex one (use a generator like KeePass).
3. Enable filtering by MAC-addresses (but remember: an experienced hacker can forge MAC).
4. Check your network for viruses using Kaspersky Virus Removal Tool.

6. Common problems and their solutions

Sometimes the device list displays incorrectly or is completely empty. Here are some situations and how to fix them:

If after all the manipulations the list of devices is still incomplete, try alternative firmware for a router (for example, DD-WRT or OpenWRT). They provide advanced monitoring tools, including:

• 📈 Real-time traffic consumption graphs.
• 🔍 Detailed connection logs with timestamps.
• 🛡️ Automatic blocking of unknown devices.

⚠️ Attention: Installing custom firmware may void your router's warranty and brick it if you install it incorrectly. Only do this if you're confident in your skills!

FAQ: Answers to Frequently Asked Questions

Is it possible to find out the list of devices without access to the router?

Yes, but with limitations. Mobile apps (Fing, NetScan) or PC utilities (Angry IP Scanner) will show active devices on your subnet. However, they won't see devices in sleep mode or turned off. ARP.

For a complete list, you need access to the router's admin panel or traffic analysis via Wireshark (requires skills).

Why is an unknown device with my MAC address showing up in the list of devices?

This could be:

1. MAC cloning — someone on your network has replaced their address with yours (a common tactic for bypassing filtering).
2. Router error - some models duplicate MAC in the logs during crashes.
3. Your device - if you have multiple network interfaces (for example, Wi-Fi + Ethernet).

Check your device's activity: if it consumes traffic when your gadget is turned off, it's 100% fake.

How to permanently block a device from the network?

Blocking methods:

• 🔒 Through the router's admin panel: Find the device in the list and click Block or Disconnect.
• 🚫 MAC filtering: add MAC-Add the address to the blacklist in the settings Wireless → MAC Filter.
• 🔄 Changing your Wi-Fi password: the most reliable solution, but you will have to reconnect all your devices.

Blocking by MAC It is ineffective against experienced hackers (they can spoof the address), so it is better to combine methods.

Is it possible to see what websites an unknown device is visiting?

Yes, but this requires control over the router or specialized software:

• 📊 In the admin panel: some routers (ASUS, Keenetic) show traffic statistics by device.
• 🔍 Through Wireshark: analysis DNS-requests or HTTP-traffic (requires skills).
• 🛡️ Parental control: Enable it in your router settings to monitor websites visited.

Without the consent of the device owner, such monitoring may violate privacy laws (for example, Article 137 of the Criminal Code of the Russian Federation).

Why do other people's devices remain connected to the network after changing the Wi-Fi password?

Possible reasons:

1. The devices are connected via cable (Ethernet) — changing the Wi-Fi password does not affect them.
2. The router saves sessions — Some models cache connections. Restart your router.
3. WPS is used If WPS is enabled, you can connect without a password. Disable it in the settings.
4. Password leak — someone learned the new password (for example, through phishing or peeping).

Solution: Disconnect all cables, reboot the router, turn off WPS and check the list of devices again.