Plesk mail limits notification & spam

[VinnyT]

I have a domain on my plesk server that has been suspended for sending out too many emails. When looking at the plesk interface, it looks like they tried to send out 30,000 messages (most of which were rejected). Is there a way to find out where these messages are coming from? Which account is sending them? Could it be a script sending these messages? Is there a way to figure that out? Mail log isn't very helpful...

 

[IgorG]

Try to use this KB article https://kb.odin.com/en/114845

 

[VinnyT]

I think I'm making progress... I disabled the mail function for that domain. But now my mail log is full of these:
plesk sendmail[2132]: handlers_stderr: DATA REPLY:554:5.7.0 The message could not be sent. You are not allowed to use sendmail utility.#012REJECT
Feb 3 21:44:48 curvve journal: plesk sendmail[2132]: REJECT during call 'limit-out' handler

Is there any way to determine which process is trying to send mail?