I have one account that keeps getting locked out. Looking at the audit.log file I find a very curious entry

2012-11-25 00:22:31,794 WARN [btpool0-15://zimbra1.mydomain.net:7071/service/admin/soap/] [name=bob@mydomain.me;ip=11.11.11.11;] security - cmd=Auth; account=bob@mydomain.me; protocol=soap; error=authentication failed for [bob@mydomain.me], account lockout;


where 11.11.11.11 is the ip address of the zimbra server. There are several other simular errors, but all of them have "//zimbra1.mydomain.net:7071" in them.

I see many (what I beleive is ) legitimate entries from this user such as:

2012-11-25 01:16:04,485 INFO [btpool0-14://zimbra1.mydomain.net/service/soap/AuthRequest] [name=bob@mydomain.me;ip=2.2.2.2;ua=ZimbraConnector ForOutlook/7.2.1.547;] security - cmd=Auth; account=bob@mydomain.me; protocol=soap;

where 2.2.2.2 is the ip address of the user

The lockout is only occuring on the one account.

Any ideas?

Zimbra version zcs-NETWORK-7.1.2_GA_3268.RHEL5_64.20110804120428