What is an Nmap Xmas scan?
The risk from this scan is minimal, from external sources you would often see such scans as they are a part of the “noise” of the internet. Consistent scans from a similar IP source or range may indicate a more targeted fingerprinting of your services, perhaps in preparation for a more dangerous attack.