I really appreciate your help.
I will look in the evening and will post what I found there
I did not even thought, that something like this is possible (real newbie I am in mails servers)...
Btw, when I was analyzing logs, I noticed taht this started in April 25th. Till that time, everything was fine.