EVERYONE on your Wi-Fi.

you think you know what's on your wifi. you probably don't.

every router has a "connected devices" page buried in its settings, but let's be honest, nobody checks it until something feels off. meanwhile your smart tv, that old phone you forgot to factory reset, your kid's tablet, and maybe a device you don't recognize at all are all just sitting on your network right now. the good news is you can find out exactly what's there in about ten seconds, for free, with a tool that's been around forever.

the command

this is nmap, a network scanning tool that basically every security professional has installed. the specific command from the reel is:

nmap -sn 192.168.1.0/24

let's break that down piece by piece so it's not just magic words:

nmap is the tool itself, short for network mapper. it's free, open source, and runs on linux, mac, and windows.

-sn tells nmap to do a "ping scan" only. it's not trying to find open ports or poke at services, it's just asking "is anything alive at this address" for every address in the range. this makes it fast and low key, it's not going to trigger anything dramatic on your own network.

192.168.1.0/24 is your network range. the /24 means "scan every address from 192.168.1.0 to 192.168.1.255," which covers a standard home network. most home routers default to something in the 192.168.0.x or 192.168.1.x range, so this is the most common one you'll see, but yours might be different.

finding your actual network range first

before you run the scan, make sure you're using the right range for your setup. on mac or linux, run:

ip a

or on mac:

ifconfig

look for something like "inet 192.168.1.34" under your wifi adapter. that tells you your subnet. so if your ip is 192.168.1.34, your scan command is nmap -sn 192.168.1.0/24. if it's something like 10.0.0.15, you'd scan 10.0.0.0/24 instead. matching this correctly matters, otherwise you're scanning a network you're not even on.

reading the results

once it runs, you'll get a list of ip addresses, and hopefully a mac address and sometimes a device name next to each one. this is where it gets interesting. you'll see entries like "unknown" or weird manufacturer names you don't recognize. that's normal for smart home junk, but it's also exactly how you catch something that shouldn't be there.

cross reference the mac address prefix (the first three pairs, like 3C:5A:B4) against an online mac vendor lookup. this tells you the manufacturer, so "oh that's my roku" or "wait, why is there a device from a manufacturer i've never heard of connected to my network."

what actually surprises people

almost everyone who runs this for the first time finds more devices than they expected. old phones that never got wiped, smart plugs from three house moves ago, a neighbor's device that latched onto weak wifi security, or a guest's phone that never disconnected. it's rarely a hacker in a hoodie, it's usually just device sprawl nobody accounted for. but that sprawl is exactly the kind of thing that creates real exposure, because every device is a potential entry point, especially cheap iot gadgets that never get security updates.

the takeaway

running nmap -sn against your own network isn't hacking, it's basic home network hygiene, and it takes less time than checking your email. if you find something unrecognized, don't panic, start by checking your router's device list and giving devices proper names so they're easier to track next time. then lock things down: change your wifi password if it's old or weak, make sure wpa3 (or at least wpa2) is enabled, turn off wps, and put smart home gadgets on a separate guest network so they can't touch your main devices if they get compromised. run this scan every few months. knowing exactly what's connected is the cheapest security upgrade you'll ever make, and it only works if you actually check.