The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse.
Malware botnet controller located at 20.199.120.149 on port 1604 TCP:
$ telnet 20.199.120.149 1604
Trying 20.199.120.149…
Connected to 20.199.120.149.
Escape character is ‘^]’
Referencing malware samples (MD5 hash):
ae7592e08ba2220b573605d159acd415 — AV detection: 43 / 68 (63.24%)