The attacks are coming from gptdown.  I just received an email from someone claiming to be the admin there that stated they have stopped the attacks.