I suggest going to one of the offending machines and running "netstat -ao" on them and see what process is attempting to connect to these addresses. You can cross reference the PID from this in task...