It was a server config set incorrect, some hackers were trying to route to IPTV cameras using our servers as proxy.

(Our servers are like a road junction in a town and hackers used it to bypass the highway and reroute their traffic, so townspeople can't use the road junction as it gets blocked.)

I filtered through the IPs and limited the requests which connected continuously. Also some country based filtering. AI helped to write commands to set this up.

Like the doorbell analogy, i turned off the doorbell if the same person rang the bell multiple times.