Slow internet speeds, constant lag when watching videos, or the inability to load a page can be caused by more than just issues with your ISP. Often, the cause is a third-party device that has illegally connected to your home network. Router owners rarely consider security until they encounter obvious signs of "neighborly" traffic. Modern tools make it possible to quickly identify the intruder and block their access.
There are numerous specialized utilities for Windows, macOS, and Android to detect uninvited guests. They scan the local network, detect the MAC addresses of connected devices, and help identify their owners. Access control This is the first step to ensuring the stable operation of your Wi-Fi channel. In this article, we'll explore proven methods and software that will help you get things in order.
Signs of unauthorized network access
The first warning sign is usually a sharp drop in bandwidth. If you're paying for a 100 Mbps plan and your speed barely reaches 10 Mbps, you should be wary. This is especially suspicious if it happens in the evening or when you're not downloading anything. Wi-Fi router may not be able to handle the number of simultaneous requests from other devices.
Another clear sign is a blinking wireless (WLAN/WiFi) indicator on the router. If the indicator blinks frequently and erratically when all your devices are off or in sleep mode, it means there's active data transfer. Someone is using your connection to download files, stream video, or mine cryptocurrency. Anomalous activity The light indicator is a sure signal for checking.
⚠️ Note: Some modern routers have a "smart" blinking feature that can simulate activity even when there's no traffic. Don't rely solely on visual inspection; use software diagnostics.
You should also pay attention to any strange behavior of connected devices. If your smartphone or laptop constantly loses connection to the router, this could be a sign of ARP spoofing or an IP address conflict caused by an attacker. In rare cases, hackers can redirect traffic through their servers, resulting in strange pop-ups or prompts to install "updates."
Built-in router administration tools
The most reliable method, which doesn't require installing any additional software, is to use your router's web interface. Almost any model, whether TP-Link, Asus, Keenetic or MikroTik, has a built-in mechanism for displaying a client list. To log in, enter the gateway IP address (usually 192.168.0.1 or 192.168.1.1) in your browser. After logging in, find the section usually called "Network Map," "Clients," "Wireless Status," or "DHCP List."
This section displays a table of all devices assigned an IP address by your router. You'll see MAC addresses and, often, hostnames. Your task is to identify each device. Compare the MAC addresses specified in your phones and laptops' settings with those in the list. Unknown device with a name like "Android-xyz" or just a string of numbers should raise suspicion.
If you find an intruder, modern routers allow you to block them directly from this menu. This function is often called "Blacklist," "Block," or is indicated by a red cross next to the device. A more advanced method is to enable MAC address filtering in "Whitelist" mode. In this mode, only devices whose addresses you manually added to the database will be able to connect to the network. the most effective way protection, although it requires manual configuration when guests purchase new equipment.
☑️ Router security check
Network scanning software for PC
If your router's interface seems too complicated or doesn't provide detailed information, specialized computer utilities can help. One of the most popular and functional programs is Wireless Network Watcher from NirSoft. This portable utility, requiring no installation, instantly scans a subnet and lists all active nodes.
The program displays the IP address, MAC address, network adapter company, and device name. This helps you understand what exactly is connected: a TV Samsung, video camera Hikvision or a neighbor's laptop. The utility can run in the background and sound a notification when a new device appears on the network. For a more in-depth traffic analysis, you can use Wireshark, but this is a tool for professionals, requiring knowledge of network protocols.
Another powerful utility is SoftPerfect WiFi GuardIt works by periodically polling the network. If the program detects a device that isn't on your "friendly" list, it issues a warning. This prevents intrusion, even if the attacker is connected for only a few minutes.
| Program | Platform | Complexity | Key function |
|---|---|---|---|
| Wireless Network Watcher | Windows | Low | Quick scan, export to HTML/XML |
| SoftPerfect WiFi Guard | Windows | Average | Continuous monitoring and alerts |
| Fing (Desktop) | Win/Mac/Linux | Low | Device type identification |
| Advanced IP Scanner | Windows | Low | Port scanning and access |
Is it dangerous to use network scanners?
Using legal scanners (like Wireless Network Watcher) on your own network is completely safe. However, running such programs on other networks (like cafes or airports) without permission may be considered an attempt to hack and violate the law.
Mobile applications for Android and iOS
The most convenient way to check the network is directly from your smartphone, as it's always at hand. For Android, the app Fing - Network ToolsIt doesn't just display a list of devices; it also attempts to identify their type (camera, printer, console) and brand. The app also runs security tests, checking for open, unsafe ports on your devices.
For iOS (iPhone/iPad) users, the choice is smaller due to the limitations of the operating system, but the app Network Analyzer or Fing (iOS version) are quite effective. They will show all devices on the local network, along with their IP and MAC addresses. Mobile scanners are especially useful when you don't have a computer handy and the router is in a hard-to-reach place.
It's important to understand the limitations of mobile operating systems: apps can only scan the subnet to which the phone is connected. If your router broadcasts 2.4 GHz and 5 GHz frequencies with different subnets (guest network), the phone will only see devices in its own segment. For a full audit, it's best to use a PC or the router's web interface. Mobile monitoring good for quick testing, but not for deep tuning.
⚠️ Note: In recent versions of iOS (starting with 14), Apple has implemented a feature called "Private Wi-Fi Address." This means your iPhone will use a random MAC address for each network. When setting up MAC address filtering on your router, be sure to disable this feature for your home network in your iPhone's Wi-Fi settings, otherwise the filter will not work.
Technical methods of protection and blocking
Once you detect an intruder, you need to take immediate action. The easiest way is to change your Wi-Fi password. Changing the password will disconnect all devices, requiring you to enter a new key to reconnect. Don't forget to reconnect your devices afterward. The password should be complex and contain mixed-case letters, numbers, and special characters.
A more strict method is MAC filtering. As mentioned earlier, you create a "whitelist" of allowed addresses. Anyone else, even with the password, won't be able to connect. However, this method has a downside: the MAC address can be spoofed (cloned) if an attacker knows the address of your legitimate device. Therefore, this method should be used in conjunction with a strong password.
It is also critical to disable the feature WPS (Wi-Fi Protected Setup). This technology allows you to connect to the network by pressing a button on the router or entering a PIN. The problem is that the PIN is often vulnerable to brute-force attacks within a few hours. Disabling WPS in the router settings closes this loophole. Use only the encryption protocol. WPA2-PSK or WPA3.
Prevention: How to secure your network in the future
To prevent this from happening again, it's essential to practice basic digital hygiene. Never share your Wi-Fi password with guests in plain text or voice in public places. Instead, use the Guest Network feature found in most modern routers. A guest network is isolated from your main network, preventing guests from accessing your files and printers.
Update your router firmware regularly. Manufacturers often patch vulnerabilities in new software versions. If your router no longer receives updates from the manufacturer, you might want to consider replacing it with a more modern model that supports the standard. Wi-Fi 6 and current security protocols.
Finally, monitor indicators and periodically (every couple of months) review your client list. Early detection helps prevent data leaks or the use of your channel for illegal activities for which the connection owner is formally responsible.
Is it possible to find out what exactly a stranger is doing online?
Standard tools (such as a client list) can't reveal the traffic content (which websites a person is visiting) because the connection is protected by HTTPS encryption. However, you can see the amount of traffic consumed and the device type. Deep packet analysis requires complex MITM (man-in-the-middle) techniques that go beyond simple diagnostics.
Frequently Asked Questions (FAQ)
Can my neighbor hack my WiFi password?
Yes, if the password is simple (for example, your date of birth or 12345678) or if you have the vulnerable WPS protocol enabled. A complex password of 12+ characters using special characters is virtually impossible to brute-force in a reasonable amount of time.
Does my ISP see that others are connected to my WiFi?
Your ISP sees the overall traffic originating from your IP address. It doesn't see the MAC addresses of devices within your local network and doesn't know how many devices are connected to a single router unless it uses deep packet inspection (DPI) to detect anomalies.
Will my internet speed slow down if my neighbors download a movie?
Yes, the bandwidth is shared between all connected devices. If you have a 50 Mbps plan and your neighbor is downloading a file at full speed, you may only get 5-10 Mbps, making watching 4K video impossible.
Is it safe to use WiFi hacking software (like Aircrack)?
Using such tools to connect to other people's networks is illegal. To protect your network, use legal scanners (like Fing or Wireless Network Watcher) that only display information but do not attempt to crack encryption.