Zimbra offers Open Source email server software and shared calendar for Linux and the Mac
Go Back   Zimbra :: Forums > Zimbra Collaboration Suite > Administrators

Welcome to the Zimbra :: Forums!
Welcome, if you would like to post a comment please register. We also encourage you to explore all things Zimbra with our team and members of the community.

Reply
 
LinkBack Thread Tools Search this Thread Display Modes
  #1 (permalink)  
Old 05-25-2011, 01:24 AM
Active Member
 
Posts: 29
Default [SOLVED] Hacked, Please Help!

Hi Guys,

We are currently in dire need of assistance. We have had 10 compromised accounts in the last 5 days, 5 of which were compromised last night.

Can someone please let me know on which log I can see the authentication for the web interface. Also any ideas are GLADLY welcomed!

Last edited by Koffie; 05-25-2011 at 01:38 AM..
Reply With Quote
  #2 (permalink)  
Old 05-25-2011, 02:05 AM
Active Member
 
Posts: 29
Default

Nevermind, found it.

Being hacked by Nigerians.

Just a note, they are connecting through zclient.
Reply With Quote
  #3 (permalink)  
Old 05-25-2011, 02:54 AM
Moderator
 
Posts: 2,207
Default

How did they achieve to compromise the accounts?

Brute force on passwords?
Reply With Quote
  #4 (permalink)  
Old 05-25-2011, 03:00 AM
Active Member
 
Posts: 29
Default

Yup, we are currently implementing a new password formula.
Reply With Quote
  #5 (permalink)  
Old 06-09-2011, 11:45 PM
Junior Member
 
Posts: 8
Default

How and where to see the log file for web client accessing?
Reply With Quote
  #6 (permalink)  
Old 06-10-2011, 12:24 AM
Active Member
 
Posts: 29
Default

The audit log, to reach it log in as user zimbra and it is located under /opt/zimbra/log/
Reply With Quote
Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes


Similar Threads

Why Join?

Registering let's you ask questions, makes it easier to search, displays any files attached to posts, and notifies you about replies.

blog.zimbra.com




 

SEO by vBSEO ©2011, Crawlability, Inc.