Wordfence published today an interesting report: the WordPress Attack Activity Report.
This new of a kind report shows the attack data for the previous month from the 1st to the end of the month and provides an analysis on the attack activity targeting WordPress websites.
The report includes a table that lists the most active attack IPs for December 2016. Ukraine still owns the top spot. Ukraine absolutely dominates the report. Out of 25 top IPs 13 are based in Ukraine.
Enjoy the rest of the report here: https://www.wordfence.com/blog/2017/01/december-2016-wordpress-attack-activity-report/