CentOS + Kolab + Fail2Ban + IMAP

[ladas]

Good morning to everyone in user list.

Has someone any experience how to detect bad login IP address at IMAP
protocol? At maillog I can see only 127.0.0.1 IP address, at guam logs
is nothing :( At windows I can use Outlook with ActiveSync where source
IP is logged but at linux with Evolution or Kontact client I can use
just IMAP protocol. Unfortunately I did not find "attacker" source IP
address + imap bad login notice at any log :(
Thank you for any ideas.

Greetings,
ladas
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kolab.org/pipermail/users/attachments/20180507/d1a8c83e/attachment.html>