All 'attacks' come from this server:
www.csservers.ro/evidenta/zombie.intrusii.ro
Razvan says: I have a script who select random servers from Setti/GTRS and makes ad on server.
check the live evidence:
www.csservers.ro/evidenta-live
Look for: 188.212.103 [Romania]