> Look at access logs on any device with a public IP address and it's clear that people are constantly looking

Yes, I'd be a bit surprised if this database hadn't already been detected by some automatic IP and port scanning scripts, and the wrong people found out about it

(I don't with exactly these things though do I might be mistaken)