Port 22: SSH / SFTP

Port 22 (TCP) is used by SSH / SFTP. Expose it only when required, with encryption and strong authentication, ideally limited to known IP addresses.

Updated

Port22
ProtocolTCP
ServiceSSH / SFTP
Internet exposureOpen only if you need it

Check if port 22 is open

What is port 22 used for?

Secure Shell for remote terminal access, file transfers (SFTP, SCP) and Git over SSH.

Should port 22 be open?

Open only if you need it. Expose it only when required, with encryption and strong authentication, ideally limited to known IP addresses. Port 22 is scanned constantly. Disable password logins, disable root login, and consider fail2ban or limiting access to known IPs. Moving SSH to another port reduces log noise but isn’t real security.

See what is listening on port 22

# Linux
sudo ss -tlnp | grep ':22 '

# macOS
sudo lsof -nP -i TCP:22 -sTCP:LISTEN

# Windows (PowerShell)
Get-NetTCPConnection -LocalPort 22 -State Listen

Open or block port 22 in a firewall

# Ubuntu / Debian (ufw)
sudo ufw allow 22/tcp
sudo ufw deny 22/tcp

# Windows (PowerShell, as administrator)
New-NetFirewallRule -DisplayName "Port 22" -Direction Inbound -Protocol TCP -LocalPort 22 -Action Allow

On cloud servers, also open the port in the provider’s security group or network firewall. At home, a service behind a router needs a port-forwarding rule to the device’s local IP.

Test it from outside

A port can be open on the server but blocked upstream. The Port Checker connects from the internet, so it shows what the world sees. From your own machine, use nc -vz example.com 22 (macOS/Linux) or Test-NetConnection example.com -Port 22 (Windows).

Port CheckerTest whether a server accepts connections on specific ports — web (80/443), mail (25/587/993), SSH, databases or remote desktop — and see which are open, closed or filtered by a firewall.
Open the tool

Frequently asked questions

What is port 22?
Secure Shell for remote terminal access, file transfers (SFTP, SCP) and Git over SSH.
Is it safe to open port 22?
Open only if you need it. Expose it only when required, with encryption and strong authentication, ideally limited to known IP addresses.
How do I check if port 22 is open?
Enter your domain or public IP in the Port Checker with port 22. It tries a TCP connection from the internet and reports open, closed or filtered.