Jim Clausing, John Markley and Matt Keyser of the AT&T Chief Security Office discuss a demo of simple tools used to find suspicious activity on a server. Matt shares some interest port activity on Internet Weather: Port 52869/TCP (Realtek SDK Miniigd UPnP SOAP) Port 55555/TCP (UPnP?) Originally recorded on April 5, 2022. AT&T ThreatTraq welcomes your e-mail questions and feedback at attthreattraq@list.att.com