Clean your subscribers' infected TV boxes without touching their privacy

Why it matters to an ISP

When a generic TV box ships infected, the malware usually uses it as an exit node for a residential proxy: third-party traffic leaving through your subscriber's IP. For you that means upstream bandwidth consumed for no visible reason, “slow internet” tickets that rebooting the router doesn't fix, and IP addresses in your range that other services end up flagging as suspicious.

The subscriber doesn't know the box is infected and, even if they did, cleaning it isn't trivial. That is why it makes sense to tackle the problem from the provider side. More context, with sources, in why your infected TV box might be wrecking your internet.

How it works

1. You load your network's IP ranges (IPv4 CIDRs or IPv6 prefixes). We validate them against your ASN.
2. Your subscriber scans their box with the AMK app from their connection. The scan is free, as for any user.
3. AMK recognizes that the public IP belongs to your network. If the box has a threat, the cleanup is offered “courtesy of your company”: the subscriber pays nothing and one prepaid credit is deducted from your account.
4. If the IP is outside your ranges or the cap was reached, the subscriber follows the normal payment flow. They are never blocked.

What you see in your portal

Your own web portal with your credit balance, top-up history (online) and a per-device report: device model, status (infected, cleaned or clean), and the IP and date and time of the event so you can cross-reference it with your subscriber base.

You don't see the list of installed apps and AMK does not handle subscriber identity: no name, no ID number, no address. The link between an IP and a customer always stays on your side.

Controls so credit isn't misused

• A configurable cap of distinct devices per public IP and period.
• You are only charged for a real cleanup: scanning consumes no credit, and neither do devices that only produce warnings.
• CGNAT ranges are flagged separately with their own cap, since many subscribers share one IP.
• Reseller technicians don't spend your credit when they clean boxes inside your range.

What we need to get started

Your network's IP ranges, your ASN and a technical contact. With that we create the ISP account, load the ranges and arrange the first credit top-up. We discuss commercial terms over WhatsApp.

If what you need is remote management and continuous monitoring of a device fleet, also see AdminSTB.