The IP address he connects to is 10.6.105.71, I don't think he's overly concerned about other people logging into that machine over the internet (10.0.0.0/8 is a private network IP range and not routable over the public internet, just like 127.0.0.1 or 192.168.0.0/24). Also, it's pretty likely that he changed the passwords or deleted the example user accounts after he made this video, just to be sure (i.e. belt and suspenders).