The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse.
Malware botnet controller located at 52.172.142.36 on port 333 TCP:
$ telnet 52.172.142.36 333
Trying 52.172.142.36…
Connected to 52.172.142.36.
Escape character is ‘^]’
Referencing malware samples (MD5 hash):
eb257e3c0ec17d0d5ce7534003bb385e — AV detection: 41 / 61 (67.21%)