Most attacks are not aimed at you

The dominant reality of web security is untargeted automation. Programs sweep the entire internet continuously, testing every address for known weaknesses, leaked keys and open services.

They do not know who you are and do not care. You are an address that answered.