iNetPlanet

It’s possible for any anti-malware software to miss something. Review all the plugin options and settings to be sure that your system is appropriately configured.

See these resources:
google.com/webmasters/hacked
codex.www.ads-software.com/FAQ_My_site_was_hacked
[Moderated]
https://www.stopbadware.org

If you don’t feel comfortable with the technical level of the articles above, you might consider getting some outside technical assistance.

My apologies for not following up sooner. This issue was resolved shortly after it was posted. The problem was related to the SELinux context of wflogs.

Checkout these resources:
[Moderated]/
https://codex.www.ads-software.com/FAQ_My_site_was_hacked

I am not using the aforementioned plug-in but have had hackers hit my sites from some of the same IP addresses you listed. I have recently started keeping a blacklist of my own (https://www.removepcvirus.com/blacklist.html) to help spread the word.

One pattern I have noticed is that hackers will try to gain access to WordPress sites using whatever usernames appear on posts on the target website. Using a screen name (nickname) for posts, which is different from the user login name, is advisable.