AFCd from LAN
I have seen some old posts regarding AFCd, but not one where it appears the source is on LAN. This is new. On about 2017-11-16 I started seeing this, where 192.168.25.52 is the LAN Domain Controller.
It looks to me like AFCd, whatever it is, is…
RE: C2/Generic-A Originating from AFCd?
I am having the same issue. It seems to be attempting to reach the domain <random>.app.anmorencai.com
Some information I have found:
Parent server gave glue for app.anmorencai.com to be app.anmorencai.com.qingcdn.com but we resolve that hostname to…
C2/Generic-A Originating from AFCd?
Hi everyone, looks like I have a similar situation to a few people.
NO Windows machines on the network, just OSX and Linux (QNAP). Woke up to over 1400 emails regarding ATP C2/Generic-A. But the originiating seems to be from AFCd? Any idea what this…