Bad security is bad. Nobody should leave ssh open to the internet at large at this point.