I wonder why they did this just on Facebook. Why not get access to real email logs, look in the Received: headers and do geo-location on the IP addresses. I'm sure if you looked in my email you'd see all sorts of messages coming from all over the world.