Sxr8o router orbipro and satellite unwanted insight and remote activity
the insight application and account are not enabled or used for my simple orbipro router and one satellite home non remote network.
Still seeing insight activity in logs how do i prevent the insight from accessing router. Is there a switch to block or stop all insight activity? Remote admin is turned off. Administering locally by way of browser login orbilogin.net because simple on site setup with no remote users. No advantage to insight for me.
Who are the monitor , worker, health worker , notification worker, use/share/cloud_dns
here is the log
This part especially
[Insight] Syslog worker was started., Saturday, December 10, 2022 16:47:27 [Insight] Notification worker was started., Saturday, December 10, 2022 16:47:27 [Insight] Monitoring worker was started., Saturday, December 10, 2022 16:47:27 [Insight] Health worker was started., Saturday, December 10, 2022 16:47:27 [Insight] cli worker was started., Saturday, December 10, 2022 16:47:27 [Insight] Config event worker was started., Saturday, December 10, 2022
And this part where says user/share....
[Insight] insight-configd was started., Saturday, December 10, 2022 16:47:23 [Insight] Connect to prod server., Saturday, December 10, 2022 16:47:22 [Insight] The agent config files were checked and validated., Saturday, December 10, 2022 16:47:22 [Insight] Set dns /opt/netgear/usr/share/cloud_dns_urls/extend_pass_domains_prod successfully., Saturday, December 10, 2022 16:47:19
The rest of log
December 10, 2022 16:47:54 [DoS Attack: ACK Scan] from source: 54.85.191.98, port 443, Saturday, December 10, 2022 16:47:49 [DoS Attack: ACK Scan] from source: 54.85.191.98, port 443, Saturday, December 10, 2022 16:47:39 [Insight] Failed to request device token. Retry in 30 seconds., Saturday, December 10, 2022 16:47:35 [Insight] Failed to request device token. response is empty., Saturday, December 10, 2022 16:47:35 [Insight] Boot API request: data = {"serialNo":"6KW10B5XA4EAF","macAddress":"9c:c9:eb:dd:1d:f3","model":"SXR80","xDeviceId":"GEDNAGV7-3220-336-184411967","deviceType":"ORBI","fwVersion":"4.2.3.102","sendPendingC, Saturday, December 10, 2022 16:47:35 [Insight] Register the device and send request to get device token., Saturday, December 10, 2022 16:47:35 [DoS Attack: ACK Scan] from source: 54.85.191.98, port 443, Saturday, December 10, 2022 16:47:34 [Insight] Need to request device token. is_registered = 0, is_claimed = 0, is_token_empty = 1, Saturday, December 10, 2022 16:47:27 [Insight] insight-brokerd was initialized. Start the main loop., Saturday, December 10, 2022 16:47:27 [Insight] Syslog worker was started., Saturday, December 10, 2022 16:47:27 [Insight] Notification worker was started., Saturday, December 10, 2022 16:47:27 [Insight] Monitoring worker was started., Saturday, December 10, 2022 16:47:27 [Insight] Health worker was started., Saturday, December 10, 2022 16:47:27 [Insight] cli worker was started., Saturday, December 10, 2022 16:47:27 [Insight] Config event worker was started., Saturday, December 10, 2022 16:47:27 [Insight] Got the xagent id., Saturday, December 10, 2022 16:47:27 [Insight] System info: device_type = ORBI, serial_number = 6KW10B5XA4EAF, model_name = SXR80, firmware_version = 4.2.3.102, insight_cert_path = /opt/netgear/usr/share/combined_intermediates_and_root.crt, config_, Saturday, December 10, 2022 16:47:27 [Insight] configd init completed., Saturday, December 10, 2022 16:47:25 [Insight] Failed to get system info from configd. Retry after 2 seconds., Saturday, December 10, 2022 16:47:25 [DoS Attack: ACK Scan] from source: 54.85.191.98, port 443, Saturday, December 10, 2022 16:47:24 [Insight] Failed to get system info from configd. Retry after 2 seconds., Saturday, December 10, 2022 16:47:23 [Insight] insight-configd was started., Saturday, December 10, 2022 16:47:23 [Insight] Connect to prod server., Saturday, December 10, 2022 16:47:22 [Insight] The agent config files were checked and validated., Saturday, December 10, 2022 16:47:22 [Insight] Set dns /opt/netgear/usr/share/cloud_dns_urls/extend_pass_domains_prod successfully., Saturday, December 10, 2022 16:47:19 [Insight] cli_server is prod, cd_ver is 53, target server is prod, Saturday, December
Re: Sxr8o router orbipro and satellite unwanted insight and remote activity
Here again, fully legitimate and normal activity.
The devices are regularly talking to Netgear's cloud with the serial number plus some - this makes it far easier to register such devices to Insight. it's not part of the active Insight cloud management, despite of the same tag.
Thanks for posting in the NETGEAR Community and sharing your experience.
By default, since your ORBI units (router and satellite/s) are Insight they will try to connect to our Insight Server regardless if it's connected to a network with internet or not. It's a good move to contact our support team to get help in removing the backend script of having your ORBI devices try to connect to Insight if you don't want to use it.
