It looked like a denial-of-service attack last night.
This was 20 different IP addresses hitting every single link on the Cellar last night in various patterns. After two hours, the new cloud provider's bots noticed the spike and alerted me to it.
We had these attacks before, but after the move I hadn't blocked the IP addresses that are responsible for it. You can see how, at the end, it doesn't suddenly stop - it trails off. That's me, blocking various sets of addresses until I got them all.
This one three hour attack led to more bandwidth use than about 4 days of everyone just generally Cellarizing. It's not big deal because the capacity to handle it is built in.