Port 22

Malicious DLL execution using Apple's APSDaemon.exe signed binary