The RCPT FROM given by the host from which the email was received.
The HELO used by the host from which the email was received.
All SMTP TO entries given by the host from which the email was received.