UDP 9999
Synopsis
- TP-Link Kasa smart-home devices (e.g., HS100/HS110 plugs and LB-series bulbs) use UDP/9999 for local discovery; tools like Home Assistant and tplink-smarthome-python broadcast to 255.255.255.255:9999 to find them on the LAN.
- This Kasa local protocol historically used weak XOR obfuscation and lacked authentication, and PoC tools have abused this on LANs (discovery via UDP/9999; control typically over TCP/9999).
- IANA registers UDP/9999 as “distinct” for Distinct Corporation software, and legacy Distinct TCP/IP/monitoring utilities have used it.
Observed activity
Last 30 days
Detailed chart