Linux Fans – kindly PLEASE assist me with identifying the spam source on my Centos6.9 smtp sendmail server

The server has also httpd with PHP services running
I did read the guide here : https://a1websitepro.com/find-track-filthy-spammer-block/
I did install EXIM

My client complains they never had this happen on the Windows Server 2000, 2003, 2012 …… (yes i know Linux is better)
here are a list of commands that I have ran

enter image description here

enter image description here

enter image description here

Did read and try:
https://serverfault.com/questions/647871/determine-originating-process-for-outbound-traffic

Linux Malware Detect


https://serverfault.com/questions/483650/how-to-find-which-script-on-my-server-is-sending-spam-emails

Tracing Spam from PHP Scripts


https://www.inmotionhosting.com/support/email/find-spam-script-location-with-exim/