Anyone detect any activity on their servers as a consequence of this?

These threat actors aren't interested in your self hosted services. The want the intel and floodgates of ALL traffic.