Comment by Caligatio

Well, guess it's worth spending a little time looking at it.

It appears that it's the Cloudflare Security Center scanning service? This would also explain how my unpublished service was located as I use Cloudflare for my DNS.