The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse.
Loki botnet controller located at 172.67.172.91 on port 80 (using HTTP POST):
hXXp://250b48d798957fbf33b77ae8a74a45ca.ml/Ausin2/fre.php
$ dig +short 250b48d798957fbf33b77ae8a74a45ca.ml
172.67.172.91
Referencing malware binaries (MD5 hash):
0bdcc5c13c57b83ccb5c097d8335c07e — AV detection: 32 / 69 (46.38)
Other malicious domain names hosted on this IP address:
paradisegetaways.net 172.67.172.91
250b48d798957fbf33b77ae8a74a45ca.ml 172.67.172.91