>Ini sih yang kirim MX backup domain Anda.
>Coba di search keseluruhan smtp-in log pada tanggal 17 dan 18 April 2013
>yang dari 210.158.211.33 saja.

Ini pak

Thu 2013-04-18 14:46:26: [73115:2] Session 73115; child 2
Thu 2013-04-18 14:46:26: [73115:2] Accepting SMTP connection from 
[210.158.211.33:36233] to [165.108.159.10:25]
Thu 2013-04-18 14:46:26: [73115:2] --> 220-mail.jkt.itochu.co.id ESMTP MDaemon 
13.0.4; Thu, 18 Apr 2013 14:46:26 +0700
Thu 2013-04-18 14:46:26: [73115:2] --> 220 No public service mail PT. Itochu 
Indonesia
Thu 2013-04-18 14:46:26: [73115:2] <-- EHLO mail-1.jw.jiji.com
Thu 2013-04-18 14:46:26: [73115:2] Performing IP lookup (mail-1.jw.jiji.com)
Thu 2013-04-18 14:46:26: [73115:2] *  D=mail-1.jw.jiji.com TTL=(59) 
A=[210.158.211.33]
Thu 2013-04-18 14:46:26: [73115:2] ---- End IP lookup results
Thu 2013-04-18 14:46:26: [73115:2] --> 250-mail.jkt.itochu.co.id Hello 
mail-1.jw.jiji.com, pleased to meet you
Thu 2013-04-18 14:46:26: [73115:2] --> 250-ETRN
Thu 2013-04-18 14:46:26: [73115:2] --> 250-AUTH LOGIN CRAM-MD5 PLAIN
Thu 2013-04-18 14:46:26: [73115:2] --> 250-8BITMIME
Thu 2013-04-18 14:46:26: [73115:2] --> 250-STARTTLS
Thu 2013-04-18 14:46:26: [73115:2] --> 250 SIZE
Thu 2013-04-18 14:46:26: [73115:2] <-- MAIL 
FROM:<[email protected]> SIZE=59377
Thu 2013-04-18 14:46:26: [73115:2] Performing IP lookup (jw.jiji.com)
Thu 2013-04-18 14:46:26: [73115:2] *  P=010 S=000 D=jw.jiji.com TTL=(59) 
MX=[mail.jw.jiji.com] {210.158.211.32}
Thu 2013-04-18 14:46:26: [73115:2] ---- End IP lookup results
Thu 2013-04-18 14:46:26: [73115:2] Performing SPF lookup (jw.jiji.com / 
210.158.211.33)
Thu 2013-04-18 14:46:26: [73115:2] *  jw.jiji.com 210.158.211.33; matched to 
SPF cache
Thu 2013-04-18 14:46:26: [73115:2] *  Result: neutral
Thu 2013-04-18 14:46:26: [73115:2] ---- End SPF results
Thu 2013-04-18 14:46:26: [73115:2] --> 250 
<[email protected]>, Sender ok
Thu 2013-04-18 14:46:27: [73115:2] <-- RCPT TO:<[email protected]>
Thu 2013-04-18 14:46:27: [73115:2] Performing DNS-BL lookup (210.158.211.33 - 
connecting IP)
Thu 2013-04-18 14:46:27: [73115:2] *  zen.spamhaus.org - passed
Thu 2013-04-18 14:46:27: [73115:2] ---- End DNS-BL results
Thu 2013-04-18 14:46:27: [73115:2] --> 250 <[email protected]>, 
Recipient ok
Thu 2013-04-18 14:46:27: [73115:2] <-- DATA
Thu 2013-04-18 14:46:27: [73115:2] Creating temp file (SMTP): 
s:\mdaemon\queues\temp\md50000951461.tmp
Thu 2013-04-18 14:46:27: [73115:2] --> 354 Enter mail, end with <CRLF>.<CRLF>
Thu 2013-04-18 14:46:30: [73115:2] Message size: 59377 bytes
Thu 2013-04-18 14:46:30: [73115:2] Performing DKIM lookup
Thu 2013-04-18 14:46:30: [73115:2] *  File: 
s:\mdaemon\queues\temp\md50000951461.tmp
Thu 2013-04-18 14:46:30: [73115:2] *  Message-ID: 
[email protected]
Thu 2013-04-18 14:46:30: [73115:2] *  Result: neutral
Thu 2013-04-18 14:46:30: [73115:2] ---- End DKIM results
Thu 2013-04-18 14:46:30: [73115:2] Passing message through AntiVirus (Size: 
59377)...
Thu 2013-04-18 14:46:30: [73115:2] *  Message is clean (no viruses found)
Thu 2013-04-18 14:46:30: [73115:2] ---- End AntiVirus results
Thu 2013-04-18 14:46:30: [73115:2] Message creation successful: 
e:\mdaemon\queues\inbound\md50003481012.msg
Thu 2013-04-18 14:46:30: [73115:2] --> 250 Ok, message saved <Message-ID: 
[email protected]>
Thu 2013-04-18 14:46:30: [73115:2] <-- QUIT
Thu 2013-04-18 14:46:30: [73115:2] --> 221 See ya in cyberspace
Thu 2013-04-18 14:46:30: [73115:2] SMTP session successful (Bytes in/out: 
59534/554)

--
--[MDaemon-L]------------------------------------------------
Milis ini untuk Diskusi antar pengguna MDaemon Mail Server.

Netiket: http://www.netmeister.org/news/learn2quote
Arsip: http://mdaemon-l.dutaint.com
Dokumentasi : http://mdaemon.dutaint.co.id
Henti Langgan: Kirim mail ke MDaemon-L-unsubscribe [at] dutaint.com
Berlangganan: kirim mail ke MDaemon-L-subscribe [at] dutaint.com
Versi terakhir MD 13.0.5, SP 4.1.5, BES 2.0.2, OC 2.3.1, SG 2.1.1, PP 2.0.1

Kirim email ke