Have you seen the list further down this page:

https://sites.google.com/site/mppsuite/why

I installed some of these HS110 devices in my house on the weekend, and am rapidly getting really concerned that TP-Link are totally negligent in respect of security considerations.

I asked TP-link support for a list of IPs that need to be whitelisted for the smart plug and they didn't understand the question!


I'm looking at setting up the application/server mentioned in the link above - seems like the most sensible thing to do. Way more work than I had wanted to do for a few smart plugs though.

In the mean time, at least they are going on the guest network - thank goodness our home router supports that out of the box.

It's interesting that a couple of years ago there was an IOT device driven DDOS onto DNS servers:

https://www.bbc.com/news/technology-37738823

I wonder if our smart plugs are still trying to do that attack??

I got around this by installing pi-hole in my network and pointing the modem to it as a DNS server. Then I added " aps1-api.tplinkra.com" to the blocklist. Once it was getting blocked rather than unknown responses it stopped trying every second and the traffic volume became more acceptable. I might log all of the traffic it's sending to see what else is going on.