High network quota usage even for less than 1 min play

[bitmap]

Are the numbers in the second screenshot a snapshot in time? As in the console network monitor? Because I'm not sure how you'd get 2.3+ Mbps out of a 1.3 Mbps (on a good day) file. (EDIT: I was doing quick math and 60s of 1300 kbps video without thinking about any other data would be ~10 MB total. None of the numbers match, which is why I ask this question.)

The numbers don't add up and there's nothing in your logs -- including if it were to do with any additional processes like metadata scraping or plugins or anything. In the second screenshot there are multiple connections to your server, correct? Could this be the culprit? Multiple connections immediately pulling large amounts of data? I guess I might just not be familiar with the tools you've used to provide this info. I understand the aggregate and the console monitor appears to show connections + incoming/outgoing. Multiple connections to your VPS would explain high usage. If you don't expect those connections, you might investigate who's accessing your server and figure out your security situation.