After further logfile examination it turns out that someone was attempting access to his administrator user.
/forums/administrators/11293-admin-password-not-working.html
-While we can't say with 100% certainty at this point that it was the exact same person as the one causing the spam sending of this thread, I am 'solving' this thread.
(You can certainly continue to post replies, as it's always good to learn for security sake. However, those reading the title will know that you don't need immediate help anymore)
msf004,
If your still concerned about a 'lost' support ticket for the issue, add your comments to the current open ticket and they can consider it for review.
However generally, as the forums & actual zimbra support are separate, plus the fact that you felt the issue critical enough to open a ticket: "I was concerned enough with the incident that I ended up opening a Zimbra support ticket for assistance." there's really not much you can do.
But, if the same issue comes up relatively soon again, and this current ticket has already been closed, have them reopen the existing ticket rather than using up another.
If you examine all your logs and find that it was just the same person in your most recent 'admin account locked', and that you have solved it on your own, please let them know as well so they don't waste support resources analyzing hundreds of lines, when they could be helping others
A list of pertinent logfiles and their functions can be found here:
/docs/ne/latest/administration_guide/9_Monitoring.12.1.html#1075561
You can also request that they examine your zcs/system setup for the possibility of any other open holes.
Bugzilla
Wiki
Source
Linear Mode
