Yeah, I got the notifications from the Telegram bot too. Sorry that happened — do you think someone was trying to mess with your server?
I don't think it was a personal attack. Since the AI boom, everybody is running ollama services to use large language models and they are exposed and unprotected by default, so there are bots trying all ports on all servers they can find, and I was just one of the victims.
To be fair, I did know my ollama service was exposed, but I was too lazy to fix it and thought it would be fine for some people to use my embedding model for free while I didn't go that hard on AI.
Turns out they tried to download 1+ terabyte of models. Bad guys!

Now it's protected as it should, so only my services can acess it.