Using timings in the graph
The block between 12am and 2am looks to be real traffic.
The 2pm, 8pm and 8am look more like a regular upload of data or similar e.g. automated backup or router going into a housekeeping mode where its CPU is busy doing other stuff. You don't happen to be running a SamKnows testing unit for the FCC?