I am seeing 100's mails in the WHM mail queue, with the following headers. Do i have a spammer on the server. How do i locate him? Can someone help.. My server IP in the below pasted message has been blanked as xx.xxx.xxx.xx thanks SN 1D3EwJ-0005BB-Tc-H mailnull 47 12 <> 1108997615 0 -ident mailnull -received_protocol local -body_linecount 77 -allow_unqualified_recipient -allow_unqualified_sender -frozen 1109062453 -localerror XX 1 firstname.lastname@example.org 146P Received: from mailnull by server.myserver.com with local (Exim 4.43) id 1D3EwJ-0005BB-Tc for email@example.com; Mon, 21 Feb 2005 09:53:35 -0500 039 X-Failed-Recipients: firstname.lastname@example.org 031 Auto-Submitted: auto-generated 061F From: Mail Delivery System <Mailer-Daemon@server.myserver.com> 023T To: email@example.com 059 Subject: Mail delivery failed: returning message to sender 050I Message-Id: <E1D3EwJ-0005BB-Tc@server.myserver.com> 038 Date: Mon, 21 Feb 2005 09:53:35 -0500 1D3EwJ-0005BB-Tc-D This message was created automatically by mail delivery software. A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed: firstname.lastname@example.org SMTP error from remote mailer after MAIL FROM:<email@example.com> SIZE=3621: host mx10.hanmail.net [18.104.22.168]: 550 5.7.1 <firstname.lastname@example.org>... Sorry,access denied(xx.xxx.xxx.xx).Your mail server sent too many e-mails to us(1200).Spammer may abuse your mail server for mail relay.If you are not the system administrator,inform this message to your system administrator.