I have a Conduit running with a Public IP SIM providing the WAN connection. ssh and web access is on, protected by password. Node-RED access is disabled.
Whenever I check the statistics via the web interface or the REST api, it reports >100MB tx for days in a row. It seems suspicious though – the graph seems to look the same even when I come back days later. Only the dates change. Also, the tx number is always bigger than the rx number.
The only thing in the messages log is lots of failed login attempts to the ssh port and the occasional cron outputs.
Could the Conduit really be uploading 100 megabytes a day? How can I investigate further?