It appears there's a discrepancy between your low daily traffic (2000 hits/day) and the reported exceeding of the 4TB/month data transfer li

FAQ
1

It appears there's a discrepancy between your low daily traffic (2000 hits/day) and the reported exceeding of the 4TB/month data transfer li

2

Hello,

I suppose that you are running a Linux machine

Use the following command: netstat -tuapen

in order to identify what programs are listening on what ports for providing some service.

If your web server has 2000 hits/day, there may be some other activity (legal or illegal) that makes a lot of network activity, outside the web server.

The connections marked as ESTABLISHED are active with a network partner.

The other ones are ready for servicing in inbound request.

For more precide information, install a package such as nload.

Read this: https://www.binarytides.com/linux-commands-monitor-network/