Could someone be building a distribution that relies on GhostBSD packages, or operating a mirror that pulls directly from the main repository? Either would be a plausible explanation for the increase in bandwidth usage. I stopped relying on GhostBSD packages for my own projects a few years ago to avoid placing that burden on the repository. It is possible that someone else is now experimenting in a similar way.
A derivative distribution could generate considerable traffic through automated builds, testing, or image creation. Likewise, a mirror that synchronizes directly from the primary repository could consume substantial bandwidth, particularly if it is misconfigured.
Other explanations are possible. A package-management bug, an automated deployment system, a caching problem, or an unusually large number of legitimate users could all produce similar effects.
