I think my user email account being hacked then i read my audit log. I see something like:
2014-03-27 17:45:14,696 INFO [qtp820657724-766419:https://myip:7071/service/admin/soap/] [name=my account;ip=my ip;] security - cmd=Auth; account=my account; protocol=soap;
But i asked my user, they say they never login webmail to check mail ???
Are my user account being hacked ?
Please help me find the answer. thanks in advance