Take a look at this thread Plex Server scans for wallets?
It might be the same stuff that’s reported over there.
