Port 1900 (SSDP / UPnP)
Device discovery on local networks.
- Transport
- UDP
- Internet exposure
- Never expose
Should not be reachable from the internet.
Security notes
- Internet-exposed SSDP is abused for amplification DDoS.
- UPnP can let malware open ports on the router automatically.
When it shows up in your logs
SSDP responses leaving your network suggest an exposed device is being used for amplification.
Related ports
- 5353