5e11df15-c42b-4115-8e30-aaa6214ab79e

Bun is a javascript runtime, I'm unsure why its being named there
My best guess would be that its the user-agent in which case the requests are coming from a server using Bun

it could be a brute force attack, probably best to assume the worst and act quickly
ratelimiting, geo blocking and IP banning will solve this problem

if your /login allows logging in via passed headers or params or whatever then this could be a brute force attack, though its unclear why there's GET requests mixed in; unless the attacker is just throwing darts in the dark

I added ratelimiting

Perfect!

all clear to mark as solved?