The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse.
Loki botnet controller located at 172.67.204.72 on port 80 (using HTTP POST):
hXXp://cnkfeng.com/neds/Panel/five/fre.php
$ dig +short cnkfeng.com
172.67.204.72
Other malicious domain names hosted on this IP address:
www.delawareliving.coop 172.67.204.72
notice.uchat.io 172.67.204.72
hihomoth.com 172.67.204.72
cnkfeng.com 172.67.204.72