I keep the instance pretty up-to-date. I don’t know how to check what the previous version was. It was probably previously updated about a week before this most recent update.
I’m thinking the phenomenon is not a bug (but I don’t want to rule that out as a possibility). Any tip on how to investigate the source of this traffic is appreciated