I don't think that proves they've been breached. Are you sure your not just seeing keep alive traffic or something random you haven't taken into account ?
Much time was taken to separate known from unknown traffic, https://news.ycombinator.com/item?id=46998191
Much time was taken to separate known from unknown traffic, https://news.ycombinator.com/item?id=46998191