Port 22

Microsoft: SharePoint attacks now officially include ransomware infections