If you've ever opened your router's admin page and seen a device you don't recognize, you're not alone — it's one of the most common things people search for right after setting up a new router or noticing their internet feels slower than usual. The good news: finding every device on your WiFi network doesn't require networking expertise. It requires the right discovery method and five minutes.
Why your router's device list isn't enough
Most routers show a "connected devices" list, but it's often incomplete or wrong. Routers typically rely on DHCP lease tables, which miss devices using static IPs, devices that connected briefly and dropped off, and anything hiding behind a MAC address randomization feature (which is now default on most phones). You end up with a list of cryptic hostnames like android-7f3a91 and no way to tell which one is your neighbor's smart plug and which one is an actual intruder.
The three ways devices reveal themselves
A proper network scan combines multiple discovery techniques, because no single method catches everything:
- ARP requests — the fastest way to enumerate every device currently active on your local subnet, since anything communicating on the LAN has to respond to ARP.
- mDNS / Bonjour — many devices (smart TVs, printers, Chromecasts, HomeKit accessories) broadcast their own name and type over multicast DNS, which is often the only way to get a human-readable label instead of a MAC address.
- ICMP ping sweeps — catches devices that stay quiet on ARP/mDNS but still respond to a direct ping, filling in the gaps the other two methods miss.
This is exactly the combination ProbeShield runs when you tap "Scan" — ARP, mDNS, and ping sweep together, then it resolves each result against a manufacturer database (MAC OUI lookup) so you see "Samsung Electronics" or "Espressif (likely a smart plug)" instead of a bare MAC address.
What to do when you find a device you don't recognize
- Check the manufacturer name first — a lot of "mystery devices" turn out to be your own smart bulb, a partner's laptop, or a game console you forgot was WiFi-connected.
- Cross-reference the IP with what's physically on and connected in the house right now — unplug something and re-scan to see if it disappears.
- If it's still unexplained, change your WiFi password immediately (this force-disconnects every device, known and unknown) and re-enable WPA3 if your router supports it.
- Check for open ports on the unknown device before you re-add anything to your trusted list — an unrecognized device with open management ports is a much bigger red flag than one with none.
Don't stop at "who's connected." A device list only tells you who's on the network. It doesn't tell you which of those devices have open ports, default credentials, or known vulnerabilities — that's a separate scan. See our guide on why open ports matter.
Scanning regularly, not just once
Device discovery is most useful as a habit, not a one-time check. New devices join home networks constantly — guests, IoT gadgets, seasonal devices — and a network you scanned clean three months ago isn't necessarily clean today. ProbeShield keeps a local scan history so you can compare today's device list against last month's and immediately spot what changed, entirely on-device with no cloud account required.