In /var /log /maillog I get these entries when try to access the webmail just once:
Nov 29 08:21:09 srv dovecot: imap-login: Login: <
[email protected]'>user=<
[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=2961677, secured, session=<uFo3c47uIOIAAAAAAAAAAAAAAAAAAAAB>
Nov 29 08:21:09 srv dovecot: imap-login: Login: </
[email protected]'><
[email protected]'>user=<
[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=2961679, TLS, session=<9mw6c47uPL4AAAAAAAAAAAAAAAAAAAAB>
Nov 29 08:21:09 srv dovecot: imap(
[email protected])<2961679><9mw6c47uPL4AAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=12, out=522, bytes=12/522
Nov 29 08:21:09 srv dovecot: imap-login: Login: </
[email protected]'><
[email protected]'>user=<
[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=2961683, TLS, session=<mu87c47uSr4AAAAAAAAAAAAAAAAAAAAB>
Nov 29 08:21:09 srv dovecot: imap(
[email protected])<2961683><mu87c47uSr4AAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=12, out=522, bytes=12/522
Nov 29 08:21:09 srv dovecot: imap(
[email protected])<2961677><uFo3c47uIOIAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=82, out=913, bytes=82/913
Nov 29 08:21:09 srv dovecot: imap-login: Login: </
[email protected]'><
[email protected]'>user=<
[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=2961686, secured, session=<6ts9c47uPOIAAAAAAAAAAAAAAAAAAAAB>
Nov 29 08:21:10 srv dovecot: imap(
[email protected])<2961686><6ts9c47uPOIAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=82, out=913, bytes=82/913
Nov 29 08:21:10 srv dovecot: imap-login: Login: </
[email protected]'><
[email protected]'>user=<
[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=2961694, secured, session=<qYNDc47uVOIAAAAAAAAAAAAAAAAAAAAB>
Nov 29 08:21:10 srv dovecot: imap-login: Login: </
[email protected]'><
[email protected]'>user=<
[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=2961701, TLS, session=<J7BGc47udL4AAAAAAAAAAAAAAAAAAAAB>
Nov 29 08:21:10 srv dovecot: imap(
[email protected])<2961701><J7BGc47udL4AAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=12, out=522, bytes=12/522
Nov 29 08:21:10 srv dovecot: imap-login: Login: </
[email protected]'><
[email protected]'>user=<
[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=2961707, TLS, session=<djdIc47ugr4AAAAAAAAAAAAAAAAAAAAB>
Nov 29 08:21:10 srv dovecot: imap(
[email protected])<2961707><djdIc47ugr4AAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=12, out=522, bytes=12/522
Nov 29 08:21:10 srv dovecot: imap(
[email protected])<2961694><qYNDc47uVOIAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=82, out=913, bytes=82/913
Nov 29 08:21:10 srv dovecot: imap-login: Login: </
[email protected]'><
[email protected]'>user=<
[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=2961709, secured, session=<ubZJc47ucOIAAAAAAAAAAAAAAAAAAAAB>
Nov 29 08:21:10 srv dovecot: imap(
[email protected])<2961709><ubZJc47ucOIAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=82, out=913, bytes=82/913
Nov 29 08:21:10 srv dovecot: imap-login: Login: </
[email protected]'><
[email protected]'>user=<
[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=2961722, secured, session=<sGNPc47uiOIAAAAAAAAAAAAAAAAAAAAB>
Nov 29 08:21:11 srv dovecot: imap-login: Login: </
[email protected]'><
[email protected]'>user=<
[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=2961725, TLS, session=<8h5Sc47uqL4AAAAAAAAAAAAAAAAAAAAB>
Nov 29 08:21:11 srv dovecot: imap(
[email protected])<2961725><8h5Sc47uqL4AAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=12, out=522, bytes=12/522
Nov 29 08:21:11 srv dovecot: imap(
[email protected])<2961722><sGNPc47uiOIAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=82, out=913, bytes=82/913
Nov 29 08:21:11 srv dovecot: imap-login: Login: </
[email protected]'><
[email protected]'>user=<
[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=2961730, secured, session=<0hFVc47uouIAAAAAAAAAAAAAAAAAAAAB>
Nov 29 08:21:11 srv dovecot: imap(
[email protected])<2961730><0hFVc47uouIAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=82, out=913, bytes=82/913
Nov 29 08:21:11 srv dovecot: imap-login: Login: </
[email protected]'><
[email protected]'>user=<
[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=2961740, secured, session=<wG9ac47uuuIAAAAAAAAAAAAAAAAAAAAB>
Nov 29 08:21:11 srv dovecot: imap(
[email protected])<2961740><wG9ac47uuuIAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=82, out=913, bytes=82/913
Nov 29 08:21:12 srv dovecot: imap-login: Login: </
[email protected]'><
[email protected]'>user=<
[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=2961750, secured, session=<BIdgc47u1OIAAAAAAAAAAAAAAAAAAAAB>
Nov 29 08:21:12 srv dovecot: imap(
[email protected])<2961750><BIdgc47u1OIAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=82, out=913, bytes=82/913
Nov 29 08:21:12 srv dovecot: imap-login: Login: </
[email protected]'><
[email protected]'>user=<
[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=2961757, secured, session=<nYhlc47u7OIAAAAAAAAAAAAAAAAAAAAB>
Nov 29 08:21:12 srv dovecot: imap-login: Login: </
[email protected]'><
[email protected]'>user=<
[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=2961763, TLS, session=<CNZoc47uEL8AAAAAAAAAAAAAAAAAAAAB>
Nov 29 08:21:12 srv dovecot: imap(
[email protected])<2961763><CNZoc47uEL8AAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=12, out=522, bytes=12/522
Nov 29 08:21:12 srv dovecot: imap(
[email protected])<2961757><nYhlc47u7OIAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=82, out=913, bytes=82/913
Nov 29 08:21:12 srv dovecot: imap-login: Login: </
[email protected]'><
[email protected]'>user=<
[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=2961767, secured, session=<jEZrc47uBuMAAAAAAAAAAAAAAAAAAAAB>
Nov 29 08:21:12 srv dovecot: imap(
[email protected])<2961767><jEZrc47uBuMAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=82, out=913, bytes=82/913
Nov 29 08:21:13 srv dovecot: imap-login: Login: </
[email protected]'><
[email protected]'>user=<
[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=2961774, secured, session=<8ilwc47uHuMAAAAAAAAAAAAAAAAAAAAB>
Nov 29 08:21:13 srv dovecot: imap(
[email protected])<2961774><8ilwc47uHuMAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=82, out=913, bytes=82/913
Nov 29 08:21:13 srv dovecot: imap-login: Login: </
[email protected]'><
[email protected]'>user=<
[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=2961782, secured, session=<Ihp1c47uNuMAAAAAAAAAAAAAAAAAAAAB>
Nov 29 08:21:13 srv dovecot: imap-login: Login: </
[email protected]'><
[email protected]'>user=<
[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=2961787, TLS, session=<sQ94c47uWr8AAAAAAAAAAAAAAAAAAAAB>
Nov 29 08:21:13 srv dovecot: imap(
[email protected])<2961787><sQ94c47uWr8AAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=12, out=522, bytes=12/522
Nov 29 08:21:13 srv dovecot: imap-login: Login: </
[email protected]'><
[email protected]'>user=<
[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=2961791, TLS, session=<t/V4c47uZr8AAAAAAAAAAAAAAAAAAAAB>
Nov 29 08:21:13 srv dovecot: imap(
[email protected])<2961791><t/V4c47uZr8AAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=12, out=522, bytes=12/522
Nov 29 08:21:13 srv dovecot: imap(
[email protected])<2961782><Ihp1c47uNuMAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=82, out=913, bytes=82/913
Nov 29 08:21:13 srv dovecot: imap-login: Login: </
[email protected]'><
[email protected]'>user=<
[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=2961793, secured, session=<wXd6c47uVOMAAAAAAAAAAAAAAAAAAAAB>
Nov 29 08:21:13 srv dovecot: imap(
[email protected])<2961793><wXd6c47uVOMAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=82, out=913, bytes=82/913
Nov 29 08:21:14 srv dovecot: imap-login: Login: </
[email protected]'><
[email protected]'>user=<
[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=2961801, secured, session=<aMN/c47ubOMAAAAAAAAAAAAAAAAAAAAB>
Nov 29 08:21:14 srv dovecot: imap(
[email protected])<2961801><aMN/c47ubOMAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=82, out=913, bytes=82/913
Nov 29 08:21:14 srv dovecot: imap-login: Login: </
[email protected]'><
[email protected]'>user=<
[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=2961810, secured, session=<pl2Fc47uhuMAAAAAAAAAAAAAAAAAAAAB>
Nov 29 08:21:14 srv dovecot: imap(
[email protected])<2961810><pl2Fc47uhuMAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=82, out=913, bytes=82/913
Nov 29 08:21:14 srv dovecot: imap-login: Login: </
[email protected]'><
[email protected]'>user=<
[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=2961819, secured, session=<PWeKc47uoOMAAAAAAAAAAAAAAAAAAAAB>
Nov 29 08:21:15 srv dovecot: imap(
[email protected])<2961819><PWeKc47uoOMAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=82, out=913, bytes=82/913
Nov 29 08:21:15 srv dovecot: imap-login: Login: </
[email protected]'><
[email protected]'>user=<
[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=2961828, secured, session=<iJKPc47uuOMAAAAAAAAAAAAAAAAAAAAB>
Nov 29 08:21:15 srv dovecot: imap(
[email protected])<2961828><iJKPc47uuOMAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=82, out=913, bytes=82/913
Nov 29 08:21:15 srv dovecot: imap-login: Login: </
[email protected]'><
[email protected]'>user=<
[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=2961838, secured, session=<FICUc47u0OMAAAAAAAAAAAAAAAAAAAAB>
Nov 29 08:21:15 srv dovecot: imap(
[email protected])<2961838><FICUc47u0OMAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=82, out=913, bytes=82/913
Nov 29 08:21:15 srv dovecot: imap-login: Login: </
[email protected]'><
[email protected]'>user=<
[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=2961845, secured, session=<+36Zc47u6OMAAAAAAAAAAAAAAAAAAAAB>
Nov 29 08:21:16 srv dovecot: imap(
[email protected])<2961845><+36Zc47u6OMAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=82, out=913, bytes=82/913
Nov 29 08:21:16 srv dovecot: imap-login: Login: </
[email protected]'><
[email protected]'>user=<
[email protected]>, method=PLAIN, rip=::1, lip=::1, mpid=2961856, secured, session=<H2+fc47uAOQAAAAAAAAAAAAAAAAAAAAB>
Nov 29 08:21:16 srv dovecot: imap(
[email protected])<2961856><H2+fc47uAOQAAAAAAAAAAAAAAAAAAAAB>: Disconnected: Logged out in=82, out=913, bytes=82/913