The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse.
Malware botnet controller located at 40.88.6.254 on port 8008 TCP:
$ telnet 40.88.6.254 8008
Trying 40.88.6.254…
Connected to 40.88.6.254.
Escape character is ‘^]’
Referencing malware samples (MD5 hash):
46547fdce8a886632f4f0a8544716285 — AV detection: 46 / 69 (66.67%)
daf6669e25be94252a63e1b0a47f8c55 — AV detection: 55 / 71 (77.46%)