The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse.
OskiStealer botnet controller located at 104.21.36.85 on port 80 (using HTTP POST):
hXXp://gervenez.xyz/6.jpg
$ dig +short gervenez.xyz
104.21.36.85
Other malicious domain names hosted on this IP address:
kirpyklosiranga.lt 104.21.36.85
gervenez.xyz 104.21.36.85