That's the default drupal icon, which was appearing because the location of the *correct* favicon was incorrect. I fixed it by guessing where it really was.
Of course, depending on how the site is deployed, it's possible that that configuration is stored in the deployment scripts and so will overwrite the manual correction I just made next time new code is deployed...