Thanks for the heads up on this issue Wordfence. Enjoyed reading your In-Depth Analysis of a Criminal Organization Targeting WordPress Websites. Very interesting read and 91.200.12.103 is now blocked. Hard to believe it could be responsible for targetting over 22,000 websites in one week!
Criminal Organization Targeting WordPress Websites. Want to know why?

WORK WITH SUE