How to check if some user has wrong password in mail client application

[myVesta]

As root, in SSH run:

Code: Select all

grep 'somedomain.com' /var/log/dovecot.log | grep 'Password mismatch'

If this command shows output, for example:

Code: Select all

Aug 30 11:56:48 auth: Info: passwd-file([email protected],123.123.123.123): Password mismatch

then someone is sending the wrong IMAP/POP3 password.

Also, check the listed IP and check if that IP is from your country because this command can show the IP of brute-force bots.

Additionaly:
How to check if fail2ban banned some IP - viewtopic.php?t=630