The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse.
ArkeiStealer botnet controller located at 23.88.111.187 on port 80 (using HTTP POST):
hXXp://23.88.111.187/
$ nslookup 23.88.111.187
static.187.111.88.23.clients.your-server.de
Referencing malware binaries (MD5 hash):
1be0d2741eaac6804e24a7586b1086b0 — AV detection: 50 / 66 (75.76)
60c2f38969bd847e011936cdf71e8870 — AV detection: 27 / 66 (40.91)
642095b6952177a920e21195a0ae52ba — AV detection: 27 / 65 (41.54)
7f20b8be5bb0395243cd598169978e34 — AV detection: 29 / 66 (43.94)
82de6228af53e0bcd76c186c6899933e — AV detection: 28 / 68 (41.18)
87c6113e8b5175bd3ecbd7e14e7cb845 — AV detection: 24 / 67 (35.82)
937049ce9c75cb262f5924fc1f19f260 — AV detection: 24 / 67 (35.82)