I checked the wiki's apache log and the attack we received was made by many ip of the class 91.207.x.x. They tried to edit all the templates until they managed to change a page while using 91.207.5.205