Log: dovecot-failedlogin-pam
May 20 20:57:09 mx1 auth: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=daemon rhost=122.175.40.117 user=daemon
For: Linux servers running dovecot - imap server
Meaning: Dovecot failed logging attempt. Someone tried to authenticate to IMAP (email) using the user daemon from 122.175.40.117 (Airtel India).
What to do: If you see many requests from the same IP, we recommend blocking it.