Anomalous network traffic detected involving potential lateral movement from a compromised host within the network to another internal system. The attacker appears to be using a known malicious IP to transfer data and execute commands on a secondary system.