My Site and Easyengine Hacked

IMHO WordFence is a lie, I don't trust it.

If you block ports 22 and 22222 you won't be able to access your server via SSH, neither you'll be able to access administrative tools (I usually block 22222).