They should restrict SSH only to the permitted sources and destination then. Leaving SSH open is a big security risk, because you are barely permitting any kind

They should restrict SSH only to the permitted sources and destination then. Leaving SSH open is a big security risk, because you are barely permitting any kind of traffic. I think that people managing the university network at that time was not so great: for couple of years, the DHCP assigned you a public, unfiltered IP address and the password policy for accessing Internet was very easy to infer (take the last digit of your student ID, remove it and sum to the first digit). And you can easily find online a student ID of someone else. I remember people putting desktop PC in the lockers with ton of warez and P2P to the world with the ID of someone studying architecture or medicine.