When Exchange hosting which is just about every business in Australia it seems (and possibly outlook.com and 365) blocked a huge range of IPs, a lot of people went to IP blocklist searches and saw the only entry was UCEPROTECT3 and connected the events. It is very possible they are unrelated or it crept in through another provider's product without anyone there explicitly choosing to use it. Unfortunately the whole system is very opaque.