[Exim] Spammer forensic

C'est un message de format MIME en plusieurs parties.
--
[ Picked text/plain from multipart/alternative ]
Some f** used my server this morning to send spam, although it shouldn't be an open relay. I want to trace it to know how he did, inorder to fix the flaw.
Any advise?

TIA

Greg
--