Zimbra SMTP/IMAP brute-force log

tail -f /opt/zimbra/log/mailbox.log | grep "invalid password"

tail -f /var/log/zimbra.log | grep "authentication fail"