Reminds me of the time our head of networking came into the lab (early 2000's) asking about why our lab had '70% of the company's total outbound traffic'.

Turns out that one of our sysadmins was running a porn server in the DMZ