hi all,
i have the following inside: /usr/local/apache/domlogs

Code:
worldlanguage.com-smtpbytes_log
deafper4mer.org-smtpbytes_log missingchildrenblog.com-smtpbytes_log worldlpgas.com-smtpbytes_log
deathball.net-smtpbytes_log missingkids.com-smtpbytes_log worldnet.att.net-smtpbytes_log
deberrym.freeserve.co.uk-smtpbytes_log mistressj.com-smtpbytes_log worldswithoutend.com-smtpbytes_log
djchass.com-smtpbytes_log ms9.hinet.net-smtpbytes_log zollnergarmisch.de-smtpbytes_log
djessentials.com-smtpbytes_log msa.hinet.net-smtpbytes_log zomtide.com-smtpbytes_log
djgavin.com-smtpbytes_log msn.com-smtpbytes_log zoominfo.com-smtpbytes_log
djlw.com-smtpbytes_log mtaconsulting.com-smtpbytes_log ztree.com-smtpbytes_log
djphear.com-smtpbytes_log mtco.com-smtpbytes_log zuneluv.com-smtpbytes_log
dkburnap.com-smtpbytes_log mtdemocrat.com-smtpbytes_log zwergenland-sterkrade.de-smtpbytes_log
dmans.com-smtpbytes_log mtu-net.ru-smtpbytes_log zyit.com-smtpbytes_log
dmatrans.com-smtpbytes_log mulberrycorner.com-smtpbytes_log zymico.com-smtpbytes_log
dmoz.org-smtpbytes_log multexinvestornetwork.com-smtpbytes_log zytor.com-smtpbytes_log
dncinc.com-smtpbytes_log multimedia.cl-smtpbytes_log zzangbbori.com-smtpbytes_log
dnpeters.com-smtpbytes_log mundosofa.com-smtpbytes_log
doble.com-smtpbytes_log murphyspage.com-smtpbytes_log
all this domains are NOT hosted on my server (there are a lot more of this entries.)
I has ben told that this domain namens are used while spaming.

Is there any way to idetify what acocunt has ben hacked and sends spaming via pop3 or apache.

I note a lot of pop3 connections fron russian, china vietnam and high cpu load this happens.


(nobody sernder has already ben dsable il WHM tweaks)


thanks for any help