One of the sites that I manage was sucking an inordinate amount of bandwidth over the past week or so.
The raw access logs showed that an image that I was hosting was being referenced on a number of different sites. Preventing this from happening is an easy fix: