Ivan has been very bad recently

Wordfence has been studying this IP address that is located in St. Petersburg, Russia. They report that it is by far the source of the most attacks on WordPress powered web sites in the past week.

Here is their article about it. It includes some interesting data about the themes and plugins that have been attacked.

https://www.wordfence.com/blog/2016/08/profile-russian-attack-ip/