WordPress Specialist: Bot Traffic Blocking + Full Site Audit (Nexcess + GTranslate TDN)

We run an established metal web radio and multilingual webzine on WordPress, hosted on Nexcess with paid GTranslate SEO/TDN. We need two things done: harmful bot traffic identified and blocked, and the full site verified to be working correctly.

What the work involves:
- Dig through server logs, identify suspicious bots and crawlers, and block them at the Cloudflare/firewall level without touching Googlebot, Bingbot, Meta, Google Ads traffic, or real visitors.
- Check whether automated traffic is overloading CPU, memory, PHP, or the database.
- Test everything: homepage, articles, radio player, admin area, images, menus, links, scripts, contact forms, all translated versions, desktop and mobile.
- Check for 403, 404, 429, 500, 502, 503, 504, and timeout errors.
- Review plugins, cron jobs, and security settings. Deliver a written report covering what was found, what was fixed, and what else is recommended.

Ground rules:
- No changes to the database, content, translations, SEO settings, DNS, CDN, or hosting configuration without approval first.
- No new plugins without approval. Every change documented.

What we need from you:
Hands-on experience with WordPress, Cloudflare, server log analysis, Nexcess or comparable managed hosting, and multilingual WordPress. GTranslate SEO/TDN experience is a strong plus. This is implementation work, not just an audit.