Port 22

Wslink: Unique and undocumented malicious loader that runs as a server