I just received this message from GitLab bot...
...and don't really understand if I'm supposed to do something. There's no login attempt from any device of mine.

Ideas please! ...except from "do not panic".

Pretty obvious that if it obviously wasn't you...
that someone or something was trying to get in to your account.
And that is not unusual in this world of ours nowadays.

Also..
If your account is locked...
You'll have to get ahold of the administration or "service desk" or whatever you wish to call it...
Explain the sitch to them and I am sure they will re- enable your access.

Thanks! It was just a one hour lock, so I got access again.
I still wonder why on earth, someone would want to hack my GitLab account. There is nothing worth stealing.

^ because they can.
And, at least in theory, they could then modify your code to mutate into something that does steal things from people that install your software.
All this happens automated anyhow: 1 million attempts, if only half a dozen yield profit, that's good for the baddies.

I just noticed the other day that during 8h there were three intrusion alerts in my router log. Googled and it seems just messages about prevented intrusions. Checked the intrusion ip owners and one was from Ukraine, one from Latvia and one from china. All IT-people. I got their adresses and phone numbers which was nice. Maybe could sent them something.

yes ....Like a cease and desist order or you will pass on the relevant information to their respecting countries authorities,
That should make them think twice before doing it again

Nothing new there, this has been going on for years.
I get a constant stream of knocking and portscans 24/7, now as I checked it at a constant rate of about 70 attempts per hour.
There have been 124 different source addresses last night, so clearly it is a distributed attempt by a horde of zombies.
Long time ago I worried about it a bit and tried even alerting owners of the hijacked machines but as it seemed so futile I gave up... Currently it is enough to know I am safe and whoever lets themselves to be zombied are not my concern.

70 attempts per hour? You are much more inhteresting than me. Or you have a much more interesting router than me. If the attempts are based on the model found by shohan.

I'd imagine it is just zombie cloud trying to extend itself; probably all internet targets with reasonably good connectivity and bandwidth are being bonged the same way continuously. The kooks that run the dossers have set the things up to semi-automatically extend the horde so they will have more attack hosts to sell.

I didin't thought of that: targeting according to bandwidth. Never really learned anything of how internet actually works, how routers work and what kind of information you can gain knowledge of if you know what you are doing. I think I have 100mb/s bandwith deal (costs 2€/month) which is actually somewhere 30-60mb/s and then through router and wifi. I mainly just use it for watching series before going to sleep. No time to hassle around anymore.