Port 22

Cicada ransomware may be a BlackCat/ALPHV rebrand and upgrade