Sounds like someone either got into your network and unleashed something they made themselves or someone already inside your network unleashed a homebrew... I would say see what all is running on the 3 boxes you took off. Use netstat and fport to see what all is trying to access the network.