I mostly see it on smaller systems configured by people or teams who doesn't really manage servers professionally. Mostly we just don't allow SSH via the inter

I mostly see it on smaller systems configured by people or teams who doesn't really manage servers professionally. Mostly we just don't allow SSH via the internet, you have to be on the office network or on a VPN and AWS instances can be accessed using Amazon Systems Manager. For those few systems that absolutely most be accessible via SSH on the internet: SSH keys and/or multi-factor authentication is required.