Please Help!

Hi, everyone. I have a small blog that has recently been getting brute force attacks and hit after hit on my homepage, although those hits do not show up in my stats (I use Feedjit on my site). Last week, they were able to rip my blog to pieces, so I phoned my host (Bluehost) and they restored my site back to normal and set me up on Cloudflare, which worked for about a week, until they somehow got through that last Thursday, even though I kept it set to "I'm Under Attack!".

Bluehost then deactivated Cloudflare and set me up with a mid-level version of sitelock, but the hackers got through that too. Finally, they set me up with sitelock with a firewall (very expensive), and even though the brute force logins and ripping up my blog have seemed to stop, they are still hitting my homepage non-stop, for 4 days straight now. My site traffic has decreased greatly and I've gotten emails from search engines, like Bing, saying they're getting a lot of 503 and other 400 to 500 plus errors when they try to crawl my site.

I don't know what to do anymore. Here is a link to my feedjit page where you can see the hits to my home page coming through. They're all from Austin, Texas and United States, and ome from 'Direct' to my home page, and they do not show up as stats in my wordpress stats, so it seems they're in my blog to some degree. http://live.feedjit.com/live/parsleysagesweet.com/0/

If anyone can help, or direct me to a not too expensive protection service that really works, I'd so appreciate it. I'm a complete mess over this, and desperate.

P.S. My computer is set up with Windows security (always up to date) with daily scans, Windows firewall, Spyware Blaster (always up to date), Malware Bytes (thrice a week scans)and I use CCleaner daily, so I don't think they got in through my PC, as everything is fine on that end.

 

Thank you, Tim. The only solution they have is sitelock, and sitelock isn't keeping those two bots from hitting my homepage over and over. A friend thinks it's Google Adsense click fraud, trying to ruin my reputation so I lose my account (sigh), So, I wouldn't even know how to resolve that one.

 

Well, if I could find them I could. They seem to be hitting me from within my site, as they don't show up as hits in my stats, and feedjit doesn't show IP's. Even sitelock couldn't find their IP's.