Daniel L. Miller wrote:
Many spammers actively target the backup servers, on the (correct) assumption that due to misunderstandings or just plain laziness the backup servers will be configured differently than the primaries.
Particularly because backup MX hosts typically don't have a list of valid users that can receive mail and so accept for all users by default (so not SMTP-time bouncing)