The IP was involved in an Email Spoofing attack, sending emails with a forged sender address, often used in phishing and spam campaigns.