Hi, I am a total noob at this, so forgive if this is stupid, but I opened wireshark and found a very suspicious-looking package.
21 3.277993770 192.168.0.198 255.255.255.255 TPLINK-SMARTHOME/JSON 191 UDP Cmd: {"system":{"get_sysinfo":{}},"cnCloud":{"get_info":{}},"smartlife.iot.common.cloud":{"get_info":{}},"smartlife.cam.ipcamera.cloud":{"get_info":{}}}
The exact same packet gets sent some random 10-60 seconds later.
After about 2000-2500 seconds, a new "round" of these two packets get sent again.
What is weird, is that the source address changes every "round", randomly either 192.168.0.156, 192.168.0.155, 192.168.0.198.