Hi, having serious issues with WP hacking.
It happened about two weeks ago, came in to find every bit of the site riddled with eval codes. I logged into the database through ftp, and deleted literally everything, downloaded wp and reinstalled. (Always keep to the newest version.) Changed all passwords, even had our provider change our mysql pw. I installed 6scan, wordfence security, and ose firewall, plus antivirus and ipblocker.
Hack was back within 24hrs. I've repeated the process 4 times, with the same result every time -- not sure what else I can do. (We were getting slammed by this ip --> 220.127.116.11, but blocking the ip didn't seem to do much.)
Could it be our provider? http://www.infometrics.net
Any tips would be appreciated.