> journalctl -f | grep dovecot
> Oct 08 08:24:10 serverhost.dtx.sc.mydomainname.com auth[3906]: pam_unix(dovecot:auth): check pass; user unknown
> Oct 08 08:24:10 serverhost.dtx.sc.mydomainname.com auth[3906]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=::1
> Oct 08 08:24:14 serverhost.dtx.sc.mydomainname.com dovecot[3336]: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 4 secs): user=<[email protected]>, method=PLAIN, rip=::1, lip=::1, TLS, session=<YDnSdNbNoKoAAAAAAAAAAAAAAAAAAAAB>