Zeek has detected network traffic that resembles command and control (C2) beaconing from an internal IP to an external server. However, further investigation reveals this is routine data synchronization with an external service.