@Bufkile 

This could be some multicast traffic even if you don't use these LAN ports - I presume it's one way (RX only). If that's the case then it's normal.

  @Bufkile 

It depends on the view point if they will be RX or TX - as you pointed they are RX only (because you don't use these ports).

If you want to be sure that your router hasn't been compromised change your administrative password, your wireless password and use these wireless security settings:

  @Bufkile 

Hi, I see from the user guide that the traffic monitor will record "sent" and "received" data.

If LAN ports are empty, there should be no "sent" data.

maybe you could have a check first:

If you have both, I think you could send an email to support.forum@tp-link.com with the following information:

1. A picture of your traffic monitor result.

2. The system log from the router.

Thank you very much.

  @Bufkile 

Hi, any chance that you could share some pictures with us?

Thank you very much.

(it would be highly appreciated if you could leave me a message for notification in case I missed the reply.)