Port 22

Google says the group behind last year's Snowflake attack slurped data from one of its Salesforce instances