You think your server is invisible because it lacks a public domain name, but...

https://reportz.io/technology/password-manager-account-takeover-can-search-exposure-help-attackers/

You think your server is invisible because it lacks a public domain name, but search engines and data brokers scan every open port around the clock