138.124.69.47
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Plant Holding GmbH
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS41745
- Hostname(s)
- hip.ru-1.ibcs
- Domain Name
- plant.nl
- Country
- 🇷🇺 Russian Federation
- City
- Moscow, Moscow
No reports in the last 60 days
138.124.69.47 has been reported 21 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
21 from
16 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 5903 [1] TCP
|
Port Scan | |
| 🇫🇷 Thecyberman |
Honeypot hit: Empty payload (likely service probe); 5903 [1] TCP
|
Port Scan | |
| 🇵🇱 sefinek.net |
Honeypot hit: Empty payload (likely service probe); 5903 [1] TCP
|
Port Scan | |
| 🇬🇧 gbzret4d |
Honeypot [uk-production01]: Empty payload (likely service probe); 5903 [1] TCP
|
Port Scan | |
| 🇺🇸 drewf.ink |
[04:20] Port scanning. Port(s) scanned: TCP/5900
|
Port Scan | |
| 🇮🇹 Dario B. |
DATE:2026-01-23 04:46:05, IP:138.124.69.47, PORT:5900 VNC brute force auth on honeypot server (epe-honey1-hq)
|
Brute-Force | |
| 🇸🇬 drewf.ink |
[02:36] Port scanning. Port(s) scanned: TCP/5900
|
Port Scan | |
| 🇺🇸 drewf.ink |
[01:44] Port scanning. Port(s) scanned: TCP/5900
|
Port Scan | |
| 🇺🇸 drewf.ink |
[01:18] Port scanning. Port(s) scanned: TCP/5900
|
Port Scan | |
| 🇩🇪 ValtonTahiri |
Honeypot hit: Unauthorized VNC connection on port 5900
Protocol: VNC
Port: 5900
|
Exploited Host | |
| 🇷🇺 nyuuzyou |
{"action": "connection", "dest_ip": "0.0.0.0", "dest_port": "5900", "server": "vnc_server", "src_ip": "138.124.69.47", "src_port": "49522", "timestamp": "2026-01-23T00:48:56.007666"}
|
Port Scan Brute-Force | |
| 🇬🇧 spamverify.com |
Honeypot Hit: Port Scan (5900) VNCRSERVER
|
Web Spam Blog Spam Bad Web Bot Web App Attack | |
| 🇺🇸 drewf.ink |
[00:13] Port scanning. Port(s) scanned: TCP/5900
|
Port Scan | |
| 🇺🇸 Xarcotic |
SSH login on honeypot.
|
Brute-Force SSH | |
| 🇩🇪 Lazentis |
Unauthorized access attempt to port 5900 (tcp)
|
Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown