The bigger question is - why is it set up this way? The fact that the hosting company has your database server set up "in the open" would be a HUGE red flag. That's like leaving the keys in your car AND putting up the neon sign pointing that out to everyone coming by.

All due respect - there's no way you should be able to connect remotely to the database via SSMS over the internet. That's a HUGE security flaw, and (IMO) whichever hosting company set this up ought go back and review their security setup. Of course - that involves pulling their head out of wherever it's stuck right now.....