How to check if some user has wrong password in mail client application

Post Reply
User avatar
myVesta
Site Admin
Posts: 928
Joined: Fri Jun 19, 2020 9:59 am
Has thanked: 8 times
Been thanked: 6 times

As root, in SSH run:

Code: Select all

grep 'somedomain.com' /var/log/dovecot.log | grep 'Password mismatch'
If this command shows output, for example:

Code: Select all

Aug 30 11:56:48 auth: Info: passwd-file([email protected],123.123.123.123): Password mismatch
then someone is sending the wrong IMAP/POP3 password.

Also, check the listed IP and check if that IP is from your country because this command can show the IP of brute-force bots.

Additionaly:
How to check if fail2ban banned some IP - viewtopic.php?t=630
Post Reply