View the cause IP address blocked by CSF:

cat /var/log/lfd.log | grep <IP-Address>

View the failed IMAP login:

cat /var/log/maillog | grep "<Domain>" | grep "imap" | grep "auth failed"