I had some site hotlink two movies this week. Just noticed it last night when I looked over my MRTG graphs. This site uses on average of 4 - 5 MBPS, well it was at 30 - 40 MBPS for the last five days. I found the site by googling a bit.
I had .htaccess enabled but since they cut & past the URL into the browser, it doesn't pass the referer variable. Since the referer was blank it was viewable. I quickly changed it and it went back down to normal.
Now I am 800Gig over my montly limit.
The two sites were http://www.spamfreexxx.com/ and http://www.wepsite.net/cgi-bin/forum/index.cgi/dmg