In the exim_mainlo, the following user is sending unsolicited emails:from email@domain.com U=user223 P=local S=1274  id=96ffd95a9fc530b5553270b6b3e6f107@domain.com T=spam subject was  hereIs the U=user223 the system user?
EXIM on Cpanel - system user spam?
exim