You can trace the IP address of the record in question back to the device it is assigned. If you have reverses set up in DNS its as simple as typing nslookup from a command prompt to reveal the device name. Now you have a starting point from which to troubleshoot. Also, I’d check for other DNS records using the same IP address as the rouge record. If present this could give you additional clues to locating the problem.