Has anyone figured this out yet? Seems someone is robotically attacking my server now. The audit log shows only local IP addresses. The Zimbra.Log file shows Pop3/IMAP/SMTP attempts, but not SOAP.
At least once a day for the past few days, my admin account gets blocked and I can't seem to figure out where it is coming from. |