Page 1 of 1

How to check if some user has wrong password in mail client application

Posted: Tue Oct 04, 2022 1:48 pm
by myVesta
As root, in SSH run:

Code: Select all

grep 'somedomain.com' /var/log/dovecot.log | grep 'Password mismatch'
If this command shows output, for example:

Code: Select all

Aug 30 11:56:48 auth: Info: passwd-file([email protected],123.123.123.123): Password mismatch
then someone is sending the wrong IMAP/POP3 password.

Also, check the listed IP and check if that IP is from your country because this command can show the IP of brute-force bots.

Additionaly:
How to check if fail2ban banned some IP - viewtopic.php?t=630