This IP is repeatedly connecting to my FTP server and attempting to initiate a TLS/SSL handshake on ...
show moreThis IP is repeatedly connecting to my FTP server and attempting to initiate a TLS/SSL handshake on a plain FTP port. The server responds with multiple "500 Syntax error, command unrecognized" messages. The client sends raw encrypted TLS bytes instead of valid FTP commands (USER, PASS, etc.).
It is clearly performing automated scanning or service probing, trying to detect vulnerable services or misconfigured FTPS endpoints.
These unsolicited connections occur very frequently and are not part of any legitimate traffic.
Please review and take appropriate action.
(213.209.143.124)> Connected on port 44921
(213.209.143.124)>
(213.209.143.124)> 500 Syntax error, command unrecognized.
(213.209.143.124)> ÞøG1û§...
(213.209.143.124)> 500 Syntax error, command unrecognized.
(213.209.143.124)> disconnected.
show less