The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse.
Malware botnet controller located at 104.41.57.9 on port 80 (using HTTP POST):
hXXp://104.41.57.9/bd21.php