You should tell them to block VPN's. That how they all try to hack. I block all VPN's and Bot's Plus use Captcha. Just an FYIUPDATE
Our hosting provider detected heavy traffic coming from suspicious IP addresses. They were blocked and it solved the issue. Some kid must have been trying to take us down for some reason.