Many home network owners are familiar with the experience of their internet slowing down and unfamiliar names appearing in the list of connected devices. Often, this is caused by a neighbor "connecting" to your router without permission, or by someone simply guessing your password. Uninvited guests Not only do they steal traffic, but they can also access your personal files or use your network for illegal activities, which creates real risks to your digital security.
Luckily, the solution to this problem is right at your fingertips—a regular computer or laptop. You don't need to be a hacker or have any special programming knowledge to restrict access. Simply access your device's settings. router and apply filtering based on the device's unique identifier. This method is the most reliable and effective way to protect the perimeter of your home network.
In this article, we'll cover the entire process in detail: from identifying the intruder to completely blocking their device. We'll examine the interfaces of popular router models, explain what a MAC address is, and why it can't be changed programmatically on the client side without specialized skills. Remember that MAC address filtering is a whitelist or blacklist approach that operates at the level of your ISP's equipment or your router, ignoring attempts by an attacker to change your IP address.
Identifying an uninvited guest on the network
Before taking drastic measures and blocking someone, you need to make sure there really are strangers on your network. Sometimes a speed drop can be caused by a poor signal, downloading updates on your own phone, or background processes on your computer. The first step is a thorough diagnostics current connections.
The easiest way to see everyone currently using your Wi-Fi is to access your router's web interface. However, if you want to conduct a more in-depth check or your router doesn't clearly display device names, you can use specialized PC software. Network scanner programs such as Wireless Network Watcher or Advanced IP Scanner, will instantly scan the address range and provide a list of all active nodes.
Pay attention to the device names. If you see "iPhone-Oleg" and there's no Oleg in the house, that's a clear sign of a break-in. It's also worth checking the number of connected gadgets against the actual number of devices you own. Don't forget that smart plugs, TVs, and game consoles also have their place on the list.
- 📡 Check the Wi-Fi blinking light on your router: if it blinks frequently when all your devices are turned off, the network is active.
- 💻 Use the Windows command prompt by typing
arp -ato see the IP and MAC address mapping table. - 📱 Compare the MAC addresses in your phone settings with those displayed in the router's admin panel.
⚠️ Attention: Some devices may be displayed with the manufacturer's name (eg. Hon Hai Precision (instead of the TV brand name). Don't rush to block unfamiliar names; check your equipment's specifications first.
Login to the router control panel
To manage access, you'll need to access the "brain" of your network. You can access the administrative panel through any browser on a computer connected to the router (via cable or Wi-Fi). The standard login address usually looks like this: 192.168.0.1 or 192.168.1.1This information may also be indicated on a sticker on the bottom of the device.
After entering the address in the browser's address bar, the system will ask for a login and password. By default, many models, such as TP-Link, D-Link or Asus, a combination is used admin/adminIf you've previously changed this information and forgotten it, you may need to reset your router to factory settings, which will require you to reconfigure your internet connection.
Interfaces from different manufacturers may look different, but their design logic is the same. Typically, the settings we need are found in sections labeled "Wireless," "Wireless Mode," "WLAN," or "Status." Your goal is to find the list of connected clients (Client List or DHCP Client List).
Finding and copying the intruder's MAC address
A key element in the blocking process is the MAC address. This is a unique 12-digit identifier assigned to the network interface of any device during manufacturing. Unlike an IP address, which can change, the MAC address (physical address) remains constant, making it an ideal filtering tool.
In the router's DHCP Client List, you'll see a table with each device's IP and MAC address. Find the suspicious device in the list. Copy its MAC address. It typically appears as a series of characters separated by a colon or hyphen, for example: A4:5E:60:C2:11:09Be careful: if you mix up even one digit, you will block the wrong device or be unable to block the correct one.
In some modern routers, for example, from Keenetic or MikroTik, you can simply click the "Block" or "Ban" button directly next to the device name in the list, and the system will automatically add the desired address to the filter. However, in older models or budget versions TP-Link Often, manual data entry into a separate menu is required.
| Parameter | Description | Example of meaning |
|---|---|---|
| IP Address | Temporary address on the local network | 192.168.1.45 |
| MAC Address | Unique physical address (for blocking) | 00-1A-2B-3C-4D-5E |
| Host Name | User-defined device name | Android-User |
| Lease Time | Time remaining until IP change | 120 minutes |
| Importance | Changes when reconnecting | Doesn't change (in most cases) |
| Usage | For communication within the network | To identify equipment |
☑️ Check before blocking
Setting up MAC address filtering (Blacklist/Whitelist)
Once you've copied the intruder's address, we move on to the most important step: setting up access rules. In the router menu, this section is often called Wireless MAC Filtering, "MAC Filtering," or "Access Control." Here you'll be asked to select the filter mode.
There are two main modes. The first is Blacklist (Block List). In this mode, you enter the addresses of those who are BANNED from access. Everyone else can connect freely. This is a convenient option if you have a lot of your own devices and only need to block one or two offenders. The second mode is Whitelist (Allow list). Here, you add only your own devices, and the router blocks absolutely everyone not on the list. This is the most reliable method, but it requires adding each new device (for example, when friends come over).
For a one-time solution, select "Deny" or "Forbidden." Click the "Add New" button and paste the copied MAC address of the offending device into the appropriate field. Make sure the rule status is set to "Enabled." After saving the settings, it may take a few seconds for the router to apply the changes and disconnect from the blocked device.
⚠️ Attention: Be extremely careful when enabling Whitelist mode (Allow only listed). If you add a rule without adding the MAC address of the computer you're currently using, you'll lose access to your router settings and internet access.
What to do if you blocked yourself?
If you have enabled the "Allow Only" mode and have not added your MAC address, you will have to connect to the router via a LAN cable (if cable access is not filtered) or perform a full reset of the router using the button on the case to restore factory settings and access.
Blocking features on different router models
Router interfaces can vary significantly depending on the manufacturer and firmware version. Understanding the menu logic will help you quickly find the function you need, even if the menu items have different names than those described above.
In routers TP-Link (especially in the green interface of older versions) the path usually looks like this: Wireless → Wireless MAC FilteringThere, you need to first click "Enable," then "Allow the stations specified by any enabled entries to access" (this is Whitelist mode) or, conversely, deny access. In the new blue interfaces (Tether), this is located under "Wireless Mode" → "MAC Address Filter."
Devices Asus have a very user-friendly interface. In the section Wireless → MAC Address Filter You can simply switch the switch to "Reject" mode and add the address from the list of connected clients with one button. Routers Keenetic (formerly ZyXEL) allow you to do this directly in the client list: click on the device, select "Deny" and the rule is applied instantly.
For equipment D-Link And Tenda The logic is similar: look for the "Wi-Fi" or "Wireless" section, then "MAC Filter." Just be careful not to confuse the MAC filter with parental controls. Parental controls limit access time but don't block connections completely, which may not be sufficient for your needs.
Additional Wi-Fi network security measures
Blocking a specific user is a temporary measure. If the attacker is technically savvy, they can change their device's MAC address to one allowed on your network (cloning) and regain access. Therefore, after addressing the immediate issue, it's essential to strengthen the overall security. safety networks.
First, change your Wi-Fi password. Use a complex combination of letters and numbers, avoiding simple dates or names. Be sure to select an encryption method. WPA2-PSK or WPA3The WEP and WPA protocols have long been cracked and provide no protection, allowing hackers to decipher the password in minutes.
It's also recommended to disable the WPS function. This technology allows you to connect to Wi-Fi by pressing a button, but it has vulnerabilities that make it easy to guess the PIN code. In the wireless network settings, find the WPS option and set it to [unclear]. Disabled or OffThis will close one of the most popular hacking loopholes.
- 🔒 Change the router administrator password from the default one
adminto complex, so that neighbors cannot access the settings. - 📡 Disable Remote Management to prevent anyone from configuring your router from the internet.
- 👀 Check the list of connected devices regularly, especially if your internet speed has dropped again.
Is it possible to block a user if they have already changed their MAC address?
If a user has changed the MAC address on their device (cloned the address of your authorized device), simple MAC filtering will no longer work. In this case, the only solution is to switch to Whitelist mode (only listed devices are allowed) and frequently change the Wi-Fi password. Hiding the network name (SSID) so it doesn't appear in the list of available networks is also effective.
Does blocking affect internet speed for others?
No, blocking one device should actually free up bandwidth and improve speeds for other users. However, the filtering process itself creates a minimal load on the router's processor, which is completely unnoticeable on modern equipment. On very old models, a micro-lag may be observed when blocking hundreds of addresses, but in a home environment (5-10 devices), this is unimportant.
What should I do if I don't remember my router password?
If you haven't changed your password, try the default combinations (admin/admin) listed on the sticker underneath. If the password has been changed and lost, the only solution is to reset the router to factory settings. To do this, find the small hole marked "Reset" on the case and press it with a paperclip for 10-15 seconds while the router is powered on. After this, the router will be as good as new and will need to be configured again (enter your ISP login and password).