For those of you interested... Iron's issue was a DNS amplification attack. Easy enough to test for, just input your IP into http://openresolver.com/?ip=
In this case it was a misconfigured Mikrotik.
Damn, sounds like they got some good use out of him. Kudos for helping him track it down.