Does this not sound suspicious to you? Maybe the server was compromised. "Unused" servers usually don't generate 970 Mbps traffic randomly.