Bad IP Address

[LOFalkirk]

The security on my wifi shows a threat detected on my box pro. It seems to be happening every day is there any way of preventing it: the message says “

A server with a bad IP tried to access your device on port 7547.

Their IP address 85.217.149.47 has a reputation for engaging in malicious activity, like phishing or hacking.”

it has blocked it but I don’t know what it is. Any help on how to get rid?

thanks

[XRaySpeX · Accepted solution]

@LOFalkirk : From Holland with hostility!

There are always bad actors trying to probe random routers' defences. As long as your router is blocking it you have nowt to worry about. As standard all unsolicited incoming port requests are blocked on your router.

[LOFalkirk]

Great thanks👍😄

[XRaySpeX]

Thanks! You're welcome 🙂 ! Glad I could be of assistance & trust it is now sorted.

[bobpullen]

@LOFalkirk - that port is the management port for the TV Box (used for software updates/diagnostics etc.)

Bad actors can see it's open so will try and target it. As explained by @XRaySpeX though, uch actions will be detected detected and blocked, so you're all good. 

[LOFalkirk]

Thanks that’s put my mind at ease

[spectral-raider]

To give a bit more detail to this post, I have also seen threats logged from the IP Address Range 85.217.149.0/24. Looking deeper at the address range doing a "whois" IP lookup, I found that the range is owned by a Netherlands company Modat B.V. and the address range is listed as being used in Canada. Modat B.V. is a Dutch cybersecurity and internet intelligence company founded in 2024 and based in The Hague. They use a platform, Modat Magnify, which is an AI-powered internet intelligence search engine that continuously maps, deep-fingerprints, and profiles internet-connected devices ("Device DNA").

I did a RIPE lookup on the range and can see they have an Abuse address listed as [email protected]. 

Organization
Modat B.V.
🔗
ASN
AS209334
📍
Location
Beauharnois, Canada
🌐
ISP
Modat B.V.
🔗
Domain
modat.io

CIDR Notation
85.217.149.0/24

IP Range
85.217.149.0 - 85.217.149.255