I put up a bare metal server with a public IP for the first time in a long time and I was stunned by how many automated opportunistic attempts it got.

Makes sense, like you say.