Events also uses it. For example the cron job uses it. I had a similar issue, where I forgot to stop the cron job so it used up everything. Another thing is that its 2k Incoming Messages & Events on a workspace level, not on a bot level, so it could be another bot or multiple active bots that used it up 🙂