I've suspended an account, yet I still see HTTP bandwidth being used. Why is this?
When a cPanel account is suspended, all services are disabled and the homepage is replaced with an "Account Suspended" page. This page is near 0.5MB in size to load.
cPanel tracks bandwidth usage by domain, and requests to this Suspended Account page are made via the domain. Thus, bandwidth required to transfer this page is tracked under the user in question.