I read a few questions regarding this topic that were pretty informative, but still wanted to pose my particular case.
My company wants to put our data in the MySQL tables we have through our web hosting provider. We went into MySQL on the server and opened it to the static public IP at our office. However, the port is the default MySQL port.
I think the obvious risk is someone accessing those tables from our IP, but they would still need a couple of levels of usernames and passwords to get access. What are some other risks? We do have parts of our website in Python which are public facing and PHP which is the front-end in the office.