In 3 years I haven’t had a single attempted connection that wasn’t me. Once you get to the ephemeral ports nobody is scanning that high.

I’m not saying run no security or something. Just nobody wants to scan all 65k ports. They’re looking for easy targets.