Cybercriminals often gain access to IP addresses by hacking the servers that these are saved on. After that, it's likely that they'll be misused for DDoS attacks (so-called IP spoofing).