Logo address

ゾンビスパム

2009/02/08

今朝(2009/02/08)は僕のスパムフォルダの中に、同じ内容のメールが多数あることに気付いた。特徴は

現時点(9:25)で、それまでに受け取った問題のメールのヘッダは次の通り。

Received: from ppp95-165-26-53.pppoe.spdop.ru ([95.165.26.53]) by ar; Tue Feb  3 18:20:52 JST 2009
Received: from c390D01C3.dhcp.bluecom.no ([195.1.13.57]) by ar; Tue Feb  3 19:14:42 JST 2009
Received: from host170-163-static.53-88-b.business.telecomitalia.it ([88.53.163.170]) by ar; Wed Feb  4 01:39:09 JST 2009
Received: from 189-11-164-162.jvece702.dsl.brasiltelecom.net.br ([189.11.164.162]) by ar; Wed Feb  4 04:36:05 JST 2009
Received: from adof158.neoplus.adsl.tpnet.pl ([79.185.87.158]) by ar; Wed Feb  4 04:53:42 JST 2009
Received: from 6mail.at ([93.126.74.76]) by ar; Wed Feb  4 07:22:10 JST 2009
Received: from afaq.afnor.org ([190.157.144.35]) by ar; Wed Feb  4 08:01:26 JST 2009
Received: from 187-24-4-153.3g.claro.net.br ([189.92.162.55]) by ar; Wed Feb  4 08:48:27 JST 2009
Received: from ais-uk.org ([122.50.134.45]) by ar; Wed Feb  4 14:32:02 JST 2009
Received: from 106-41-113-92.pool.ukrtel.net ([92.113.41.106]) by ar; Wed Feb  4 16:17:02 JST 2009
Received: from 80-42-1-87.dynamic.dsl.as9105.com ([80.42.1.87]) by ar; Wed Feb  4 17:28:45 JST 2009
Received: from advanced-connect.net ([213.136.119.52]) by ar; Thu Feb  5 00:06:58 JST 2009
Received: from active-international.co.jp ([84.232.8.151]) by ar; Thu Feb  5 00:07:17 JST 2009
Received: from adt.com ([89.7.195.195]) by ar; Thu Feb  5 00:09:39 JST 2009
Received: from alexander.lyris.net ([78.179.142.26]) by ar; Thu Feb  5 03:29:34 JST 2009
Received: from afwaterheater.com ([92.82.93.181]) by ar; Thu Feb  5 05:13:44 JST 2009
Received: from 115-235.citylan.bg ([213.145.115.235]) by ar; Thu Feb  5 08:09:03 JST 2009
Received: from amboinsight.com ([85.112.63.242]) by ar; Thu Feb  5 08:17:16 JST 2009
Received: from aacamuseum.org ([87.69.207.50]) by ar; Thu Feb  5 09:26:49 JST 2009
Received: from host207.190-137-163.telecom.net.ar ([190.137.163.207]) by ar; Thu Feb  5 10:26:57 JST 2009
Received: from host139-225-static.12-87-b.business.telecomitalia.it ([87.12.225.139]) by ar; Thu Feb  5 16:45:40 JST 2009
Received: from abrimobile.com ([189.81.76.228]) by ar; Thu Feb  5 17:44:22 JST 2009
Received: from 101-fm.com ([93.112.64.229]) by ar; Thu Feb  5 20:05:28 JST 2009
Received: from 0x50a696ca.abnxx10.dynamic.dsl.tele.dk ([80.166.150.202]) by ar; Fri Feb  6 01:49:52 JST 2009
Received: from host181-17-dynamic.182-80-r.retail.telecomitalia.it ([80.182.17.181]) by ar; Fri Feb  6 04:57:15 JST 2009
Received: from static24-72-136-66.regina.accesscomm.ca ([24.72.136.66]) by ar; Fri Feb  6 09:11:33 JST 2009
Received: from ppp-58-9-96-93.revip2.asianet.co.th ([58.9.96.93]) by ar; Fri Feb  6 16:21:11 JST 2009
Received: from abcremanufacturing.com ([85.122.58.237]) by ar; Fri Feb  6 17:27:25 JST 2009
Received: from affv.nu ([121.171.249.189]) by ar; Fri Feb  6 18:58:13 JST 2009
Received: from accenture.com ([88.222.172.249]) by ar; Fri Feb  6 19:03:36 JST 2009
Received: from africa1.com ([124.195.169.154]) by ar; Fri Feb  6 21:00:40 JST 2009
Received: from alrsolutions.com ([41.178.196.101]) by ar; Sat Feb  7 00:02:00 JST 2009
Received: from 83-157-217-216.rev.libertysurf.net ([83.157.217.216]) by ar; Sat Feb  7 00:27:07 JST 2009
Received: from pool-72-84-136-215.slsbmd.east.verizon.net ([72.84.167.151]) by ar; Sat Feb  7 01:07:40 JST 2009
Received: from adbag.de ([78.165.244.43]) by ar; Sat Feb  7 06:03:31 JST 2009
Received: from e178183035.adsl.alicedsl.de ([85.178.183.35]) by ar; Sat Feb  7 06:17:11 JST 2009
Received: from athedsl-4507756.home.otenet.gr ([94.71.180.116]) by ar; Sat Feb  7 06:30:53 JST 2009
Received: from 3w-company.de ([200.219.177.193]) by ar; Sat Feb  7 07:04:26 JST 2009
Received: from host-70-45-49-176.onelinkpr.net ([70.45.49.176]) by ar; Sat Feb  7 08:27:07 JST 2009
Received: from 189-30-214-246.paemt702.dsl.brasiltelecom.net.br ([189.30.214.32]) by ar; Sat Feb  7 08:34:45 JST 2009
Received: from advanced-tech.com ([200.61.224.226]) by ar; Sat Feb  7 12:01:04 JST 2009
Received: from pool-173-73-142-16.washdc.fios.verizon.net ([173.73.142.16]) by ar; Sat Feb  7 18:46:15 JST 2009
Received: from lynx.aitai.ne.jp ([211.1.219.76]) by ar; Sat Feb  7 19:33:31 JST 2009
Received: from host4.201-252-137.telecom.net.ar ([201.252.137.4]) by ar; Sun Feb  8 02:38:23 JST 2009
Received: from ppp-58-8-171-128.revip2.asianet.co.th ([58.8.177.36]) by ar; Sun Feb  8 06:42:54 JST 2009
これを見るに、今月の 3 日から受け取っている事が分かる。
なお、この中に含まれているドメイン名(HELO ホスト)は全く信用できない。(ドメイン名所有者の名誉のため...)

ゾンビスパムの活動が話題になるが、僕の PC はゾンビスパムに汚染されたことはないので...ああ、そういう事もあるのかと言う程度で受け取っていたが、僕が観測した今回のスパムは、ゾンビ PC からの発信でなければ不可能であろう。

今回観測した 45 個の「Special Offers by email」メールの背後には莫大な数の「Special Offers by email」ゾンビが存在する事が推定される。(僕が特別に狙われる理由は無いからね)

P.S.

さらに、次の文字列

We ship Worldwide! To all countries! To all destinations!
を含むメールが 146 個も見つかった。これも「Special Offers by email」メールと同じ特徴を持っている。(大きく表示されるこの文字列が H1 ヘッダではないことを除いて)

Received: from 246.213.190.90.dyn.estpak.ee ([90.190.213.246]) by ar; Mon Jan 19 23:57:01 JST 2009
Received: from aimp.org ([94.179.162.217]) by ar; Tue Jan 20 02:31:31 JST 2009
Received: from 189-30-166-7.ctame700.dsl.brasiltelecom.net.br ([189.30.166.7]) by ar; Tue Jan 20 03:07:54 JST 2009
Received: from 189-47-171-175.dsl.telesp.net.br ([189.47.171.175]) by ar; Tue Jan 20 04:35:35 JST 2009
Received: from alice-dsl.de ([200.121.217.24]) by ar; Tue Jan 20 07:36:16 JST 2009
Received: from alts-03.com ([200.3.181.241]) by ar; Tue Jan 20 11:44:44 JST 2009
Received: from 19.cn ([211.118.251.27]) by ar; Tue Jan 20 12:57:43 JST 2009
Received: from alfadelta.com ([59.182.249.6]) by ar; Tue Jan 20 16:21:16 JST 2009
Received: from access2access.com ([94.120.42.71]) by ar; Tue Jan 20 17:03:20 JST 2009
Received: from accedoconsulting.com ([87.18.12.1]) by ar; Tue Jan 20 18:33:24 JST 2009
Received: from amplicolife.pl ([41.204.73.104]) by ar; Tue Jan 20 19:28:09 JST 2009
Received: from accent.be ([124.43.59.210]) by ar; Tue Jan 20 20:30:15 JST 2009
Received: from agemont.it ([85.121.26.30]) by ar; Tue Jan 20 22:04:34 JST 2009
Received: from ait.co.th ([92.84.245.129]) by ar; Tue Jan 20 23:34:20 JST 2009
Received: from 200-153-132-130.dsl.telesp.net.br ([200.153.132.130]) by ar; Tue Jan 20 23:44:48 JST 2009
Received: from aig.co.jp ([41.248.241.56]) by ar; Wed Jan 21 00:48:22 JST 2009
Received: from p57B8CCF7.dip.t-dialin.net ([87.184.190.33]) by ar; Wed Jan 21 01:09:08 JST 2009
Received: from host134-254-dynamic.8-79-r.retail.telecomitalia.it ([79.8.254.134]) by ar; Wed Jan 21 01:38:00 JST 2009
Received: from agt.net ([78.139.139.24]) by ar; Wed Jan 21 04:47:51 JST 2009
Received: from OL46-230.fibertel.com.ar ([24.232.230.46]) by ar; Wed Jan 21 06:22:35 JST 2009
Received: from 201-41-249-179.bnut3703.dsl.brasiltelecom.net.br ([201.41.250.238]) by ar; Wed Jan 21 07:49:51 JST 2009
Received: from affiniagroup.com ([189.103.32.79]) by ar; Wed Jan 21 09:22:52 JST 2009
Received: from 171-3-124-91.pool.ukrtel.net ([91.124.3.171]) by ar; Wed Jan 21 10:55:57 JST 2009
Received: from ro-chr.netdatacomm.cz ([81.19.5.73]) by ar; Wed Jan 21 17:57:43 JST 2009
Received: from analysys.com.cn ([222.120.74.166]) by ar; Wed Jan 21 21:55:04 JST 2009
Received: from 201-13-165-159.dial-up.telesp.net.br ([201.13.165.159]) by ar; Wed Jan 21 23:39:08 JST 2009
Received: from 79-71-136-223.dynamic.dsl.as9105.com ([79.71.136.223]) by ar; Thu Jan 22 01:17:09 JST 2009
Received: from reachness.repast.volia.net ([77.122.13.72]) by ar; Thu Jan 22 03:00:56 JST 2009
Received: from alldiamond.net ([88.231.35.122]) by ar; Thu Jan 22 04:57:09 JST 2009
Received: from 178.89.188.72.cfl.res.rr.com ([72.188.89.178]) by ar; Thu Jan 22 07:34:47 JST 2009
Received: from aluform.com ([84.31.169.208]) by ar; Thu Jan 22 08:49:57 JST 2009
Received: from ppp079166165245.dsl.hol.gr ([79.166.165.245]) by ar; Thu Jan 22 09:27:51 JST 2009
Received: from adachikagu.com ([220.68.172.8]) by ar; Thu Jan 22 11:59:08 JST 2009
Received: from 20151224067.user.veloxzone.com.br ([201.51.224.67]) by ar; Thu Jan 22 15:47:58 JST 2009
Received: from host173-125-static.29-79-b.business.telecomitalia.it ([79.29.125.173]) by ar; Thu Jan 22 21:31:30 JST 2009
Received: from amplifier.co.nz ([89.32.213.213]) by ar; Fri Jan 23 02:18:38 JST 2009
Received: from iwv234.internetdsl.tpnet.pl ([95.48.73.234]) by ar; Fri Jan 23 05:50:03 JST 2009
Received: from amerireach.com ([190.188.83.123]) by ar; Fri Jan 23 09:14:43 JST 2009
Received: from a4tech.com.cn ([200.204.201.207]) by ar; Fri Jan 23 14:20:22 JST 2009
Received: from americafirst.com ([85.22.65.154]) by ar; Fri Jan 23 18:05:53 JST 2009
Received: from almaak.usc.edu ([84.78.92.119]) by ar; Fri Jan 23 18:44:04 JST 2009
Received: from C-59-100-230-61.per.connect.net.au ([59.100.230.61]) by ar; Fri Jan 23 20:51:20 JST 2009
Received: from user-544267f4.l6.c2.dsl.pol.co.uk ([84.66.103.244]) by ar; Fri Jan 23 21:52:11 JST 2009
Received: from dsl-224-118.hive.is ([85.197.224.118]) by ar; Sat Jan 24 00:27:34 JST 2009
Received: from 201-92-141-67.dsl.telesp.net.br ([201.92.141.67]) by ar; Sat Jan 24 03:15:48 JST 2009
Received: from agedwards.com ([201.12.108.2]) by ar; Sat Jan 24 03:39:59 JST 2009
Received: from erft-4db7cb31.pool.einsundeins.de ([77.183.203.49]) by ar; Sat Jan 24 05:36:48 JST 2009
Received: from 195-188-93-140.cable.ubr06.smal.blueyonder.co.uk ([195.188.93.140]) by ar; Sat Jan 24 05:58:22 JST 2009
Received: from a54321.com ([88.251.170.16]) by ar; Sat Jan 24 09:45:57 JST 2009
Received: from rrcs-24-123-37-166.central.biz.rr.com ([24.123.37.166]) by ar; Sat Jan 24 10:11:14 JST 2009
Received: from 83-223-188-241.cpe.netmadeira.com ([83.223.188.241]) by ar; Sat Jan 24 10:21:14 JST 2009
Received: from 189-93-54-166.3g.claro.net.br ([189.93.54.166]) by ar; Sat Jan 24 10:59:22 JST 2009
Received: from rrcs-72-45-192-198.nys.biz.rr.com ([72.45.192.198]) by ar; Sat Jan 24 11:36:39 JST 2009
Received: from acctcorp.com ([193.254.62.131]) by ar; Sat Jan 24 21:14:46 JST 2009
Received: from 201-68-145-236.dsl.telesp.net.br ([201.68.145.236]) by ar; Sat Jan 24 21:16:45 JST 2009
Received: from adsby.uzoogle.com ([74.4.254.103]) by ar; Sun Jan 25 00:19:56 JST 2009
Received: from aic.gov.au ([96.49.75.51]) by ar; Sun Jan 25 00:52:11 JST 2009
Received: from 64-60-50-76.static-ip.telepacific.net ([64.60.50.76]) by ar; Sun Jan 25 00:55:07 JST 2009
Received: from 196-147-124-91.pool.ukrtel.net ([91.124.147.196]) by ar; Sun Jan 25 03:19:32 JST 2009
Received: from 89-139-96-41.bb.netvision.net.il ([89.139.96.41]) by ar; Sun Jan 25 03:28:14 JST 2009
Received: from 193-93-14-35.solver.net.ua ([193.93.14.35]) by ar; Mon Jan 26 05:18:25 JST 2009
Received: from amoje.com ([60.49.174.113]) by ar; Mon Jan 26 05:24:06 JST 2009
Received: from alfaholding.ru ([118.136.88.191]) by ar; Mon Jan 26 11:04:25 JST 2009
Received: from adsl190-28-51-198.epm.net.co ([190.28.51.198]) by ar; Tue Jan 27 00:09:39 JST 2009
Received: from alverno.edu ([80.240.190.218]) by ar; Tue Jan 27 00:25:21 JST 2009
Received: from 81.203.224.31.dyn.user.ono.com ([81.203.224.31]) by ar; Tue Jan 27 02:52:47 JST 2009
Received: from h11.223.117.75.dynamic.ip.windstream.net ([75.117.223.11]) by ar; Tue Jan 27 04:30:07 JST 2009
Received: from host62-93-dynamic.53-82-r.retail.telecomitalia.it ([82.55.185.53]) by ar; Tue Jan 27 05:43:49 JST 2009
Received: from altodigital.com ([94.189.232.241]) by ar; Tue Jan 27 05:58:15 JST 2009
Received: from e182037255.adsl.alicedsl.de ([85.182.37.255]) by ar; Tue Jan 27 06:21:56 JST 2009
Received: from amazingglaze.co.uk ([201.244.132.116]) by ar; Tue Jan 27 08:15:32 JST 2009
Received: from chello080108214085.4.13.vie.surfer.at ([80.108.214.85]) by ar; Tue Jan 27 08:15:33 JST 2009
Received: from host17.200-43-230.telecom.net.ar ([200.43.230.17]) by ar; Tue Jan 27 12:16:55 JST 2009
Received: from aloemaiim.co.kr ([203.170.217.82]) by ar; Tue Jan 27 16:58:58 JST 2009
Received: from abacus.bates.edu ([123.182.241.175]) by ar; Tue Jan 27 19:32:28 JST 2009
Received: from alside.com ([78.139.152.157]) by ar; Tue Jan 27 20:13:20 JST 2009
Received: from afnor.fr ([189.81.38.162]) by ar; Tue Jan 27 21:51:36 JST 2009
Received: from amr-planaltobeirao.pt ([85.101.5.99]) by ar; Wed Jan 28 00:01:59 JST 2009
Received: from 185.Red-79-148-104.dynamicIP.rima-tde.net ([79.148.104.185]) by ar; Wed Jan 28 01:56:25 JST 2009
Received: from afpros.com ([123.236.129.190]) by ar; Wed Jan 28 02:44:05 JST 2009
Received: from accredhome.com ([88.229.201.95]) by ar; Wed Jan 28 03:53:16 JST 2009
Received: from 222.61.220.87.dynamic.jazztel.es ([87.220.61.222]) by ar; Wed Jan 28 04:23:36 JST 2009
Received: from abalive.com ([124.28.66.126]) by ar; Wed Jan 28 20:48:55 JST 2009
Received: from aamainc.us ([211.221.72.176]) by ar; Wed Jan 28 21:55:53 JST 2009
Received: from host-95-189-131-12.pppoe.omsknet.ru ([95.189.131.12]) by ar; Wed Jan 28 22:04:23 JST 2009
Received: from agate.plala.or.jp ([190.29.38.230]) by ar; Wed Jan 28 22:42:41 JST 2009
Received: from 91-67-153-142-dynip.superkabel.de ([91.67.153.142]) by ar; Wed Jan 28 23:20:58 JST 2009
Received: from alienware.com ([85.110.102.150]) by ar; Thu Jan 29 00:07:23 JST 2009
Received: from africaspeaks.com ([125.160.213.4]) by ar; Thu Jan 29 00:25:46 JST 2009
Received: from 1jian.com ([89.43.104.219]) by ar; Thu Jan 29 03:26:01 JST 2009
Received: from aischool.org ([85.101.15.58]) by ar; Thu Jan 29 05:07:47 JST 2009
Received: from 189-46-217-56.dsl.telesp.net.br ([189.46.217.56]) by ar; Thu Jan 29 05:50:09 JST 2009
Received: from afic.com.au ([78.162.176.52]) by ar; Thu Jan 29 07:14:51 JST 2009
Received: from host81-141-1-159.wlms-broadband.com ([81.141.1.159]) by ar; Thu Jan 29 08:13:12 JST 2009
Received: from adventinc.com ([190.176.232.235]) by ar; Thu Jan 29 11:30:30 JST 2009
Received: from ais-uk.org ([160.99.101.8]) by ar; Thu Jan 29 19:38:09 JST 2009
Received: from alum.mit.edu ([122.169.65.96]) by ar; Thu Jan 29 21:14:46 JST 2009
Received: from alysis.nl ([85.93.105.47]) by ar; Thu Jan 29 21:58:18 JST 2009
Received: from ahmdealer.com ([187.16.243.3]) by ar; Fri Jan 30 02:57:55 JST 2009
Received: from ambrisko.com ([190.232.40.16]) by ar; Fri Jan 30 06:09:31 JST 2009
Received: from alldisk.com ([189.38.165.117]) by ar; Fri Jan 30 09:05:56 JST 2009
Received: from amada.com ([92.84.87.94]) by ar; Fri Jan 30 16:58:15 JST 2009
Received: from 86-45-231-241-dynamic.b-ras1.mgr.mullingar.eircom.net ([86.45.231.241]) by ar; Fri Jan 30 19:16:57 JST 2009
Received: from amat.com ([195.167.65.123]) by ar; Fri Jan 30 21:14:45 JST 2009
Received: from ae.com ([116.40.142.46]) by ar; Fri Jan 30 21:48:20 JST 2009
Received: from ppp-61-59.30-151.libero.it ([151.30.59.61]) by ar; Sat Jan 31 03:34:13 JST 2009
Received: from adachi-group.co.jp ([151.81.26.124]) by ar; Sat Jan 31 05:45:40 JST 2009
Received: from ambrosi.com ([116.71.81.132]) by ar; Sat Jan 31 11:50:19 JST 2009
Received: from 189-041-16-008.xd-dynamic.ctbcnetsuper.com.br ([189.41.16.8]) by ar; Sat Jan 31 21:24:09 JST 2009
Received: from 92.41.154.125.sub.mbb.three.co.uk ([92.41.154.125]) by ar; Sun Feb  1 02:32:48 JST 2009
Received: from afghan-wireless.com ([189.144.140.45]) by ar; Sun Feb  1 03:24:41 JST 2009
Received: from 201-3-16-108.gnace701.dsl.brasiltelecom.net.br ([201.3.16.108]) by ar; Sun Feb  1 08:35:13 JST 2009
Received: from aa.e-mansion.com ([201.82.148.107]) by ar; Sun Feb  1 14:13:30 JST 2009
Received: from akpb.nl ([58.232.214.90]) by ar; Sun Feb  1 15:03:42 JST 2009
Received: from host221-15-dynamic.48-82-r.retail.telecomitalia.it ([82.48.15.221]) by ar; Sun Feb  1 15:52:35 JST 2009
Received: from p54BBFF46.dip.t-dialin.net ([84.187.255.70]) by ar; Sun Feb  1 16:53:36 JST 2009
Received: from alexmann.com ([118.176.115.171]) by ar; Sun Feb  1 19:17:02 JST 2009
Received: from Pc-3420.NA.Home.Ran.Ro ([89.34.245.92]) by ar; Sun Feb  1 20:01:16 JST 2009
Received: from 7.Red-79-154-202.dynamicIP.rima-tde.net ([79.154.202.7]) by ar; Sun Feb  1 20:23:11 JST 2009
Received: from abcrestoration.com ([88.236.188.181]) by ar; Mon Feb  2 02:46:02 JST 2009
Received: from abcrocky.com.au ([94.155.111.173]) by ar; Mon Feb  2 05:50:55 JST 2009
Received: from s209-121-68-96.bc.hsia.telus.net ([209.121.68.96]) by ar; Mon Feb  2 12:24:50 JST 2009
Received: from ahmc.com ([87.13.108.135]) by ar; Mon Feb  2 16:38:12 JST 2009
Received: from alice-dsl.de ([87.246.54.100]) by ar; Mon Feb  2 19:30:20 JST 2009
Received: from 23-188-113-92.pool.ukrtel.net ([92.113.153.236]) by ar; Mon Feb  2 22:10:18 JST 2009
Received: from afip.gov.ar ([88.230.40.9]) by ar; Mon Feb  2 22:59:00 JST 2009
Received: from 200-158-33-153.dsl.telesp.net.br ([200.158.33.153]) by ar; Mon Feb  2 23:27:43 JST 2009
Received: from alsde.edu ([195.114.129.243]) by ar; Tue Feb  3 00:24:27 JST 2009
Received: from 101.Red-88-12-169.dynamicIP.rima-tde.net ([88.12.169.101]) by ar; Tue Feb  3 05:02:28 JST 2009
Received: from host71-255-dynamic.14-87-r.retail.telecomitalia.it ([87.14.255.71]) by ar; Tue Feb  3 07:01:08 JST 2009
Received: from ahlam.com ([201.37.20.59]) by ar; Tue Feb  3 11:12:40 JST 2009
Received: from 124-169-129-88.dyn.iinet.net.au ([203.206.126.142]) by ar; Tue Feb  3 14:47:43 JST 2009
Received: from 101-159-246-201.adsl.terra.cl ([201.246.159.101]) by ar; Thu Feb  5 09:56:54 JST 2009
Received: from acta-assistance.com ([59.184.16.209]) by ar; Thu Feb  5 16:50:11 JST 2009
Received: from h137-220.pool212-16.dyn.tolna.net ([212.16.137.220]) by ar; Thu Feb  5 22:31:45 JST 2009
Received: from ags.gob.mx ([95.69.70.177]) by ar; Fri Feb  6 05:55:39 JST 2009
Received: from 20151009066.user.veloxzone.com.br ([201.51.9.66]) by ar; Fri Feb  6 07:56:05 JST 2009
Received: from ambion.com ([221.158.202.8]) by ar; Fri Feb  6 18:02:50 JST 2009
Received: from agrileasing.it ([95.110.72.110]) by ar; Fri Feb  6 22:00:43 JST 2009
Received: from 155.231.219.87.dynamic.jazztel.es ([87.219.231.155]) by ar; Sat Feb  7 00:33:16 JST 2009
Received: from alibinali.com ([200.63.125.124]) by ar; Sat Feb  7 03:22:45 JST 2009
Received: from aeac192.neoplus.adsl.tpnet.pl ([79.186.2.192]) by ar; Sat Feb  7 07:57:23 JST 2009
Received: from ama-assn.org ([222.241.228.166]) by ar; Sat Feb  7 13:49:07 JST 2009
Received: from adp.com ([189.7.99.131]) by ar; Sat Feb  7 19:50:18 JST 2009
Received: from amico-jp.com ([78.179.176.24]) by ar; Sun Feb  8 03:42:40 JST 2009
Received: from pool-72-64-9-4.cncdnh.east.myfairpoint.net ([72.64.9.4]) by ar; Sun Feb  8 08:11:55 JST 2009
最初のメールは 1 月の 19 日であることがわかる。
なお、この中に含まれているドメイン名(HELO ホスト)は全く信用できない。(ドメイン名所有者の名誉のため...)