The host at this IP address is obviously operated by cybercriminals. It is running a malware botnet controller which is being used to control infected computers (bots) around the globe using a trojan horse.
Malware botnet controller located at 20.199.121.197 on port 7707 TCP:
$ telnet 20.199.121.197 7707
Trying 20.199.121.197…
Connected to 20.199.121.197.
Escape character is ‘^]’
Referencing malware samples (MD5 hash):
ca0faaa9590ee6b8173d80181f3074bb — AV detection: 42 / 68 (61.76%)