Hi, it seems your site may have been compromised..
First step:
Run suspect files
Admin CP -> Maintenance -> Diagnostics -> Suspect File Versions
if nothing is wrong in that, disable all plugins..
if that still does not fix it, export your database and search it for that IP address.
If that still doesnt work, check all your files for that IP.
I'm having a simular problem, my site appears to be falling apart .. When I run Admin CP -> Maintenance -> Diagnostics -> Suspect File Versions, I sure get a lot of files where it says something like these are not reconized as vBulliten files. Question... what do I do with all the unreconized files that are scattered all over the site?
I also get pop-ups whenever a url is clicked, mostly all misc dot ru extensions.
I have V4.1.9
Thanks