I once hosted a side project with a Raspberry Pi at home. One week later I got lots of unknown IPs from China trying to access php admin / other admin URLs I do

I once hosted a side project with a Raspberry Pi at home. One week later I got lots of unknown IPs from China trying to access php admin / other admin URLs I don't remember with default usernames and presumably password. Luckily I didn't set up an admin console. No I don't want the risk of someone trying to enter my network. Even if I have a firewall and the best security practices I may worry about that at night, like strangers trying to break your lock.