I think quite a few hosts enable this somewhere. Could actually be a sendmail configuration. That way if there is a rogue script somewhere on the server that is generating email they can see not only where the script is located, but also the IP of the user generating the email.