The iDRAC for the r640 may be vulnerable to the ssh cve-2023-48795. ssh can be disabled.
iDRAC 2.18.1
ssh can be disable in the iDRAC. Log in to the iDRAC interface and search for ssh in the top right corner search box. The result will take you directly to the Services -> SSH menu to Enable or Disable ssh.