The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse.
Loki botnet controller located at 13.68.141.149 on port 80 (using HTTP POST):
hXXp://nesofirenit.gq/stats/fre.php
$ dig +short nesofirenit.gq
13.68.141.149
Other malicious domain names hosted on this IP address:
gobonamud.gq 13.68.141.149
nesofirenit.gq 13.68.141.149