The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse.
Malware botnet controller located at 104.21.22.115 on port 80 (using HTTP POST):
hXXp://berryglobals21.xyz//inc/105d47e967eb0b.php
$ dig +short berryglobals21.xyz
104.21.22.115
Other malicious domain names hosted on this IP address:
www.perfectlyreviewed.com 104.21.22.115
berryglobals21.xyz 104.21.22.115