Port 22

'Strictly limit' remote desktop unless you like catching BianLian ransomware