I wouldn't be as worried about just the ports being open, as much as I would for the 21 vulnerabilities on the server.