The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse.
Malware botnet controller located at 20.111.34.199 on port 1604 TCP:
$ telnet 20.111.34.199 1604
Trying 20.111.34.199…
Connected to 20.111.34.199.
Escape character is ‘^]’
Referencing malware samples (MD5 hash):
d37ed5e461a720f9ec9aef6e1a2eb104 — AV detection: 48 / 66 (72.73%)