# WHATPORT(222)

## NAME

port 222 — rsh-spx (in practice: relocated SSH) — Registered to Berkeley rshd with SPX authentication; in practice a common alternate SSH port.

Protocol: TCP  
IANA registry

## DESCRIPTION

IANA registers 222 as `rsh-spx`, Berkeley `rshd` using SPX authentication — a Kerberos-era variant of the rsh remote-shell family that is long dead. What you actually meet on 222 is a relocated SSH daemon: shared hosts and home routers move sshd off 22 to cut log noise from password-guessing bots, and 222 is one of the favored destinations. A banner grab settles it immediately, since SSH announces itself with an `SSH-2.0-...` line. Moving the port reduces noise, not risk.

## EXPOSURE

**Expose with care.** If it is SSH, the exposure rules for port 22 apply and the port number changes nothing. If it is genuinely rsh, it is cleartext remote shell and must not be reachable.

## CHECK

```sh
nc -v TARGET 222
```

## SEE ALSO

- iana — [IANA Service Name and Transport Protocol Port Number Registry](https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml) (iana.org)

---

HTML: <https://whatport.net/222/> · JSON: <https://whatport.net/222.json> · full dataset: <https://whatport.net/ports.json>