our site has been attacked magento 1

Hello there, in the last 5 days, our site has been showing 503 error time to time when we talk to the server support they said for the first time this was on 19th may ------------------------------------------------------------------- The 503 error is most commonly (not always) caused due to high server load. I've inspected the server and its resource usage and I believe someone might be abusing your website. I've checked the access logs and it seems that this particular image: [login to view URL] And in general, the media/catalog/product folder for [login to view URL] has been accessed over 105K times for the past 24 hours: Code: # cat xxx.com-ssl_log | grep 'media/catalog/product'| we -l 105666 I recommend blocking public access to that particular folder via this guide: [login to view URL] Which would block the abuser(s) from accessing it and returning the server load to a normal state, which will stop the 503 errors? ^ the reason is that someone is abusing the site through that image(and other ones in that folder). -------------------------------------------------------------------------------- and then they reply another one I actually believe I might have fixed this without applying the deny from all fix. What I've done is enabled "Hotlink protection" on your account, which should stop this amusement. If you'd like to learn a bit more about that, you can do so at the following link: [login to view URL] -------------------------------------------------------------------------------------------------------------------------- But after that the problem still there and we tell them that, they send this I've been monitoring the server's performance for about an hour now and it seems that both the Hotlink protection and the deny rule would not do the trick as this seems to be a DDoS attack. I've tried denying that particular folder from being accessed, but then other parts of the website are getting attacked, which again results in the same high load. Another solution would be to enable CloudFlare, which then has the option called "I'm under attack" which is rerouting the DDoS requests and only filters out legitimate web browser requests. You can learn a bit more about how to activate and manage CloudFlare, directly from your SiteGround cPanel from the following guide: [login to view URL] Once done, you'll need to activate the "I'm under attack" option, as described here: [login to view URL] ^ and we do that but the problem still there, --------------------------------------------------------------------------------------------------- then they said you have to increase the CPU from 2 -4 we have increased it to 5 but after 24 hours the CPU has reach 5 CPU and then the site top again then we increase it ------------------------------------------------ and now some of the image and icon has been removed from the site we don't know how! also some function doesn't work