I had already asked via ticket on the administrative logs. here is the answer: Hello,
The administrative log does not record every SMTP auth attempt - this is by design, so as to not pollute the admin logs. The SMTP log is the correct place to look for SMTP auth attempt records.
Sabatino Traini
Chief Information Officer
Genial s.r.l.
Martinsicuro - Italy