load average: 88.18, 47.61, 19.91 and exim

[kahlid123]

1922 root      15   0  4056 4056  3108 S    57.0  0.1   5:45   0 httpd
 2313 mysql     15   0 31400  30M  1416 S    18.7  1.5   0:29   0 mysqld
 7655 root      16   0  3680 3680  2904 D     2.1  0.1   0:00   2 exim
 7657 root      16   0  3684 3684  2904 D     2.1  0.1   0:00   2 exim
 3438 root      16   0  1692 1692   912 R     1.9  0.0   0:06   3 top
 7631 root      16   0  3584 3584  2824 D     1.7  0.1   0:00   2 exim
 7652 mailnull  15   0  1968 1968  1600 D     1.7  0.0   0:00   0 exim
 7715 root      21   0  1856 1856  1524 D     1.7  0.0   0:00   0 exim
 7588 mailnull  16   0  3536 3536  2752 D     1.5  0.1   0:00   2 exim
 7595 mailnull  16   0  1960 1960  1600 D     1.5  0.0   0:00   2 exim
 7633 root      16   0  3680 3680  2904 D     1.5  0.1   0:00   2 exim
 7646 root      15   0  3468 3468  2688 D     1.5  0.1   0:00   3 exim
 7649 root      15   0  3676 3676  2904 D     1.5  0.1   0:00   0 exim
 7717 mailnull  21   0  1916 1916  1568 D     1.5  0.0   0:00   0 exim
 7627 root      16   0  3680 3680  2904 D     1.3  0.1   0:00   2 exim
 7660 root      16   0  3456 3456  2688 D     1.3  0.1   0:00   3 exim
    1 root      16   0   516  516   456 S     1.1  0.0   0:09   3 init
   24 root      15   0     0    0     0 DW    1.1  0.0   0:07   0 kjournald
 7628 mailnull  15   0  1964 1964  1600 D     1.1  0.0   0:00   3 exim
 7651 root      15   0  3680 3680  2904 D     1.1  0.1   0:00   2 exim
 7690 root      20   0  3680 3680  2904 D     1.1  0.1   0:00   0 exim
 6876 mailnull  16   0  3720 3720  2948 D     0.9  0.1   0:00   1 exim
 7401 mailnull  15   0  3676 3676  2900 D     0.9  0.1   0:00   3 exim
 7623 root      16   0  3688 3688  2912 S     0.9  0.1   0:00   2 exim
 7625 root      15   0  3680 3680  2904 D     0.9  0.1   0:00   2 exim
 7641 root      16   0  3672 3672  2904 D     0.9  0.1   0:00   0 exim
 7643 root      16   0  3680 3680  2904 D     0.9  0.1   0:00   2 exim
 7644 mailnull  15   0  1968 1968  1600 D     0.9  0.0   0:00   3 exim
 7139 mailnull  16   0  3728 3728  2948 D     0.7  0.1   0:00   1 exim
 7452 mailnull  16   0  3536 3536  2752 D     0.7  0.1   0:00   2 exim 

[chirpy]

Could be anything. You need to track the in/ou going email in the exim mail logs to find out what's happening. Could be a large dictionary attack on your hosted domains, could be a spammer exploiting a vulnerable script on your server. Often checking emails in your mail queue can shed some light on the matter.