Zimbra Forums

I notised that 2 days a row at 9:18 (my local time) sed is started. it works about 10-20 seconds and after that zmswath appears and all of this.
Can this be used somehow?

It means that your server was hacked. To quickly fix your problem (temporarily, until you clean up your server): cd /opt/zimbra/mailboxd find webapps -type d -exec chmod 0755 {} \; find webapps -type f -exec chmod 0644 {} \; chmod 755 /opt/zimbra/data/tmp/upload Then restart Zimbra; su - zimbra zmco...