The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse.
ArkeiStealer botnet controller located at 213.226.114.217 on port 80 (using HTTP POST):
hXXp://woou.link/548152.php
$ dig +short woou.link
213.226.114.217
Referencing malware binaries (MD5 hash):
0251d24781ef86814ff23e2910ad73f3 — AV detection: 15 / 60 (25.00)
18e5cd2ae346c068e188d1b28e4fd62c — AV detection: 23 / 64 (35.94)
2d676c908eab921f0e099044a419ae85 — AV detection: 24 / 65 (36.92)
52c1503424ac5248b0c5b43519f46559 — AV detection: 27 / 68 (39.71)
808adf6081b81647b5f3f805533a59f2 — AV detection: 25 / 69 (36.23)
a12d6d8e3c1858b6dd2293fbadb655f0 — AV detection: 23 / 67 (34.33)
ad08541fcc43f348a60e6b71b35d7af8 — AV detection: 24 / 69 (34.78)
fde2e8128511494d1436896ac780cea2 — AV detection: 21 / 62 (33.87)