You think your server is invisible because it lacks a public domain name, but...
https://www.scribd.com/document/1016148224/Password-Manager-Account-Takeover-Can-Search-Exposure-Help-Attackers-182382
You think your server is invisible because it lacks a public domain name, but search engines and data brokers scan every open port around the clock