on any server with ssh exposed you’ll probably see a bunch of login attempts in the logs (automated attacks trying to find machines with a weak password). only keys is the way lol.