Turning on logging and seeing bots for the first time does not equate to novel or specifically crafted attacks. Web services get hit regularly by bots. A few dozen an hour is almost nothing for a public facing web service.
Yes, but seeing a few dozen of a new type show up within less of a day of the exploit being public is pretty mad. The usual probing is nothing special.