There is no need to post 3 times in the AM hours within a 4.5 hour spread. When we wake up and drink our coffee we will respond
If you do not have htaccess that prevents access to those files sure people can view them directly. I dont think someone's hacking you but a spider viewing your files