This is a simple script that check for exploited users on the maillog file. This is written for Zimbra servers.