Zimbra-服务器阻止新连接

Question

我不知道这里是否是解决这类问题的正确地方...

我们有一个内部Zimbra邮件服务器，并且使用一个特定的帐户/计算机zimbra服务器仅“阻止”了该会话并暂停了从该设备进行的新登录。 这台计算机在Oulook 2010中配置了一个帐户，并在zimbra Webmail中使用了另一个帐户。 当Zimbra服务器阻止会话时，oulook再次弹出身份验证表单，并且由于zimbra服务器已被阻止新连接， 它至少30分钟不能再次登录（？）。在zimbra网络邮件中，它显示“发生网络服务错误”。

我做了什么：

- Make a full scan with BitDefender Anti-virus (i've suspected that maybe a mail bot installed on user computer), but nothing was found
- Checked windows event logs, nothing related to outlook or massive errors/warnings was found
- Tried to check zimbra logs, and all logs are huge and have more than 800mb (compacted) and more than 4gb uncompressed. 

    below is the part of log with "Access from IP 10.10.10.54 suspended, for repeated failed login." The "10.10.10.54" IP address is the IP from that user which
    has the problems. But another interesting thing is that, has another lines in the log with an strange IP address, like an external IP address

我不知道是什么原因导致此问题，或者客户端计算机是否有问题。

有什么想法吗？

mailbox.log的一部分：

2018-09-20 07:49:52,302 DEBUG [qtp127618319-1101376:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] AuthProvider - zimbra:no auth token
2018-09-20 07:49:52,303 INFO  [qtp127618319-1101376:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] misc - Access from IP 74.208.160.99 suspended, for repeated failed login.
2018-09-20 07:49:53,479 DEBUG [qtp127618319-1101329:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] AuthProvider - zimbra:no auth token
2018-09-20 07:49:53,479 INFO  [qtp127618319-1101329:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] misc - Access from IP 10.10.10.54 suspended, for repeated failed login.
2018-09-20 07:49:53,523 DEBUG [qtp127618319-1101376:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] AuthProvider - zimbra:no auth token
2018-09-20 07:49:53,524 INFO  [qtp127618319-1101376:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] misc - Access from IP 10.10.10.54 suspended, for repeated failed login.
2018-09-20 07:49:53,572 DEBUG [qtp127618319-1101329:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] AuthProvider - zimbra:no auth token
2018-09-20 07:49:53,572 INFO  [qtp127618319-1101329:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] misc - Access from IP 10.10.10.54 suspended, for repeated failed login.
2018-09-20 07:49:53,613 DEBUG [qtp127618319-1101376:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] AuthProvider - zimbra:no auth token
2018-09-20 07:49:53,613 INFO  [qtp127618319-1101376:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] misc - Access from IP 10.10.10.54 suspended, for repeated failed login.
2018-09-20 07:49:53,675 DEBUG [qtp127618319-1101329:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] AuthProvider - zimbra:no auth token
2018-09-20 07:49:53,675 INFO  [qtp127618319-1101329:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] misc - Access from IP 10.10.10.54 suspended, for repeated failed login.
2018-09-20 07:49:53,715 DEBUG [qtp127618319-1101376:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] AuthProvider - zimbra:no auth token
2018-09-20 07:49:53,715 INFO  [qtp127618319-1101376:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] misc - Access from IP 10.10.10.54 suspended, for repeated failed login.
2018-09-20 07:49:53,759 DEBUG [qtp127618319-1101329:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] AuthProvider - zimbra:no auth token
2018-09-20 07:49:53,759 INFO  [qtp127618319-1101329:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] misc - Access from IP 10.10.10.54 suspended, for repeated failed login.
2018-09-20 07:49:53,803 DEBUG [qtp127618319-1101376:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] AuthProvider - zimbra:no auth token
2018-09-20 07:49:53,803 INFO  [qtp127618319-1101376:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] misc - Access from IP 10.10.10.54 suspended, for repeated failed login.
2018-09-20 07:49:54,018 DEBUG [qtp127618319-1101329:https:https://mail.MYDOMAIN.com.br:7073/service/admin/soap/] [] AuthProvider - zimbra:no auth token