Well, this is what I get from that command: https://pastebin.com/9pvf1qpJ
Nothing out of the ordinary there, unless I've mistakenly confused upload and download in my post - the issue you describe sound typical of the WAN interface used by Trend Micro being different than what returned by get_wan_ifname().