They were coming from addresses assigned to Google, presumably some shared hosting / cloud services (aka rent-a-server).
For now they have been blacklisted and the KiwiSDRs here are back online.
I've disabled the s-meter extensions here as there was a certain user in Taiwan who would use them for 12+ hours at a time on all the KiwiSDRs here, monitoring CHU of all things.
I have seen some people sitting on HFDL for extended periods, if that becomes a problem I may need to disable it as well. I've not noticed much WSRP usage here, fortunately.