I recently started looking more closely at my NextDNS logs/analytics and noticed a LOT of *.netgear.com entries.
I am using OPNSense on my router and directly all DNS through NextDNS. However I am using my Orbi Wifi as purely an AP. They seem to be the culprits behind all those netgear entries.
So I added *.netgear.com to my Denylist… 24 hours later over 50% of my blocks are due to *.netgear.com
WOW… anyone else seeing this - and also WHY is netgear generating so many transactions - especially since it is JUST being used as an AP?