Keenetic devices collect sensitive data and transmit it to their servers ?

[alasedo]

Hello,

Devices:

1 Peak DSL (KN-2510) router/modem mode. Internet connection over vdsl pppoe. Keenetic Os Version: 4.3.0 preview.

7 Speedster (KN-3010) devices as mesh mode. Keenetic Os Version: 4.3.0 preview.

i seen under Keenetic OS; Web Interface / Diagnostics / Active Connections / Router PPPoE connected list and mesh devices connected list too many IP addresses connected. This IP addresses; 65.21.196.130, 78.46.134.143, 95.217.199.2, 135.181.129.158, 157.90.158.183, 168.119.198.59 and protocol/ports; TCP/80, TCP/443, UDP/40xx, UDP/56xx, UDP/9 .

When I query the blocks of all these IP addresses subnet /24 on the internet, the result is ASN AS24940 Hetzner Online GmbH. The query was made via the ipinfo.io website. Since I thought these IP addresses were related to Keenetic cloud services and Keenetic mobile application, I removed the Service for mobile application and Cloud services agent modules from the component options from all devices. Also Automatic updates and Product Improvement Programme disabled in System Settings.

After rebooting all devices, connections continued to be established over the same IP addresses. Then I tried blocking the same IP addresses and protocols/ports for Internet (PPPoE) and Local Segment from Keenetic Firewall but rules did not work. Same IP addresses continued to connect. I believe Keenetic devices collect sensitive data and transmit it to their servers. Since these Keenetic devices are located in a corporate company, we do not want any devices information and/or any of its connections to be transmitted to any Keenetic Cloud System, Keenetic Hosts/Servers/RMM and Keenetic Mobile App etc.

I urgently request detailed technical support regarding this issue. We are concerned about system and network security. I am also leaving a screenshot of these connections. In addition, the same IP addresses connection also occurs on 7 Speedster (KN-3010) devices connected to the Peak DSL (KN-2510) router as a mesh. The same problem exists in the Keenetic Os 4.2.6.3 stable version.

Thank you very much.  @admin @ndm @Le ecureuil @hellonow @slomblobov

Best regards.

 

Edited April 13 by alasedo
added more details

[SySOPik]

Hello. Most likely, no one will answer these questions for you.

The company Keenetic manufactures routers for home use, not for the corporate segment. I have long been interested in turning off the transfer of confidential (technical) information and the answer was that they will not do this. Keenetic will not create a separate technical support segment for the corporate class and take into account the requests of the corporate sector.

For the corporate class, it is better to look at Fortinet or Mikrotik devices.

Edited April 14 by SySOPik

[eralde]

On 4/13/2025 at 5:57 AM, alasedo said:

Hello,

Devices:

1 Peak DSL (KN-2510) router/modem mode. Internet connection over vdsl pppoe. Keenetic Os Version: 4.3.0 preview.

7 Speedster (KN-3010) devices as mesh mode. Keenetic Os Version: 4.3.0 preview.

i seen under Keenetic OS; Web Interface / Diagnostics / Active Connections / Router PPPoE connected list and mesh devices connected list too many IP addresses connected. This IP addresses; 65.21.196.130, 78.46.134.143, 95.217.199.2, 135.181.129.158, 157.90.158.183, 168.119.198.59 and protocol/ports; TCP/80, TCP/443, UDP/40xx, UDP/56xx, UDP/9 .

When I query the blocks of all these IP addresses subnet /24 on the internet, the result is ASN AS24940 Hetzner Online GmbH. The query was made via the ipinfo.io website. Since I thought these IP addresses were related to Keenetic cloud services and Keenetic mobile application, I removed the Service for mobile application and Cloud services agent modules from the component options from all devices. Also Automatic updates and Product Improvement Programme disabled in System Settings.

After rebooting all devices, connections continued to be established over the same IP addresses. Then I tried blocking the same IP addresses and protocols/ports for Internet (PPPoE) and Local Segment from Keenetic Firewall but rules did not work. Same IP addresses continued to connect. I believe Keenetic devices collect sensitive data and transmit it to their servers. Since these Keenetic devices are located in a corporate company, we do not want any devices information and/or any of its connections to be transmitted to any Keenetic Cloud System, Keenetic Hosts/Servers/RMM and Keenetic Mobile App etc.

I urgently request detailed technical support regarding this issue. We are concerned about system and network security. I am also leaving a screenshot of these connections. In addition, the same IP addresses connection also occurs on 7 Speedster (KN-3010) devices connected to the Peak DSL (KN-2510) router as a mesh. The same problem exists in the Keenetic Os 4.2.6.3 stable version.

Thank you very much.  @admin @ndm @Le ecureuil @hellonow @slomblobov

Best regards.

Hello, @alasedo.

The data that our devices collect is listed here: https://keenetic.com/en/legal#dpn. Even if you have disabled the cloud features and service to communicate with the mobile app, there is still data transmission for the Authenticity Status Verification and the Internet Checker feature as outlined in the document.

You can disable the Internet Checker, by executing the following commands:

no service internet-checker
system configuration save

However, it is not possible to disable data transmission that is used for the authenticity verification purposes.