difference between ua=zclient and ua=ZimbraWebClient?

[gabrieles]

Can we re-up this thread? The answer link is broken and can't find any other.
A customer says he can't find a message. Via mailbox.log i can see that message being trashed and deleted. But customer denies to have manually done it.
If i see ua=ZimbraWebClient or ua=Thunderbird/XXX i can clearly say that he deleted the message. But what i found is ua=zclient.
Can we definitely say what is zclient?

[gabrieles]

Re-up this thread. Today I found a customer's account in lockout with no apparent reason. The auth was performed from the customer's public IP (1.2.3.4).

2019-08-26 09:20:08,251 WARN [qtp1325124186-237094:http://localhost/service/soap/AuthRequest] [name=my-account@my-domain.com;oip=1.2.3.4;ua=zclient/8.8.12_GA_3794;soapId=211ecc57;] security - cmd=Auth; account=
my-account@my-domain.com; protocol=soap; error=authentication failed for [my-account@my-domain.com], account lockout;

Again, the user agent is zclient
The soap req comes from the mailstore itself (8.8.12), the frontends are 8.8.8
The password is the same from 2018, so I excluded a polling device with wrong credentials.

[phoenix]

A quick internet search throws up these results: https://www.startpage.com/do/dsearch?qu ... ge=english

The ones of interest might be these:

https://wiki.zimbra.com/wiki/ZClient

https://zimbra.github.io/adminguide/8.8.9/