I'd say this is normal, but probably depends where you are hosted. E.g. IP address ranges belonging to AWS are heavily monitored (I had an idle nginx + docker + gitea EC2 hacked due to not updating for a while). Other software, like Wordpress, may notify other servers about blog posts you create, drawing organic traffic that way.