Zimbra will lock out accounts on authentication failures / brute force attacks. Its very easy to unlock accounts from admin GUI. This can also be done from command line as zimbra user.
sudo as zimbra user in the server and execute the following commands.
zmprov ma firstname.lastname@example.org zimbraAccountStatus active.
You are done. The same command can be used to change other account status (maintenance or closed) too.