Looks like notslop was hacked. Looking at the logs they were trying to read .env files, downloading executables. Not sure how to get rid of them.. ah fuck