I have talked to my web hosting. I feel like I've been bothering them too much lately by asking them to continually roll it back. It is on a shared hosting which makes me a bit worried, maybe it's time to switch...although I did buy 3 years of hosting.
They actually went ahead and changed the cpanel password for me, and it got defaced the next day.
This may be a coincidence but it started happening after I upgraded to vbulletin 4.0. I know its in beta, and I used to have this mod which now I think prevented this from happening:
https://vborg.vbsupport.ru/showthrea...light=firewall