curl -X GET "https://mail.example.com/api/v1/get/logs/sasl" -H "X-API-Key: $MAILCOW_API_KEY"
Fetch recent SMTP authentication logs via the API
This returns the SASL authentication log, listing every successful and failed SMTP login. A burst of failures from one IP signals a brute-force attack on the submission port. Pair it with netfilter logs to confirm bans were applied.
Looking for more? Search all 7,657 commands — works offline, in English or Spanish, and fixes typos.