The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse.
DCRat botnet controller located at 178.250.157.127 on port 80 (using HTTP GET):
hXXp://178.250.157.127/Php_updatedlePrivate.php
$ nslookup 178.250.157.127
mandera.but.fvds.ru
Referencing malware binaries (MD5 hash):
411f9446b442f1562501e75f2e6705a0 — AV detection: 47 / 69 (68.12)