Exim load , finding email ID

tail -f /var/log/exim_mainlog


If the exim and spamd process eating the CPU
Fire the above command to see the logs

in this IP or user or email id which is causing the issue can be seen

just inform the client from which domain that email ID is
client will get the account suspended

and thus issue resolved.