BACnet was designed to allow communication of building automation and control systems for applications such as heating, ventilating, and air-conditioning control (HVAC), lighting control, access control, and fire detection systems and their associated equipment. - Wikipedia
When searching on CriminalIP with the query:
You can see a lot of interesting information, including the vendor name, firmware and even the location of the building (which sometimes includes the address of the building as well as the floorplan of the building)
I’m new to threat intelligence but is there any reason why this port would even be facing the internet?