The host at this IP address is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse.
Smoke Loader botnet controller located at 195.24.68.11 on port 80 (using HTTP POST):
http://galala.ru/upload/
galala.ru. 3600 IN A 195.24.68.11
$ dig +short -x 91.189.114.12
wcarp.hosting.nic.ru.