Thread: My zimbra is being used to send spam by malicious outsiders!
View Single Post
  #7 (permalink)  
Old 06-29-2009, 02:16 AM
higeon higeon is offline
Intermediate Member
  
Posts: 18
Default
I cannot find the IP address 86.60.97.105
but found a lot of logs such as:

2009-06-29 04:48:00,775 INFO [btpool0-125] [name=data@newcon.co.jp;ip=127.0.0.1;] security - cmd=Auth; account=data@newcon.co.jp; protocol=soap;

I think the account compromised is data@newcon.co.jp.
But why the IP is 127.0.0.1?
Reply With Quote