When a site is getting many hits for potential dodgy people

Hi

My question is, when a site is getting many hits for potential dodgy people trying to access a site, and especially if a site has been compromised previously, and cleaned up completely, and those dodgy people are still trying to get into that site … whether it is bots or a dodgy human.

I assume then that would take up and cause issues on the web hosting server side of things, using I/O resources as it is getting continual hits and then Wordfence having to do its job … therefore using MORE resources in the backend of the WordPress website to protect the website?

I have some client sites who keep getting lagging on the hosting server, and I/O limit hit to 100%, then they have to kill the service so I can do things, then its fine for a while. I have had numerous conversations with the issue with hosting and they are saying it is not their servers.

These are sites with Wordfence on them only. Sites with no Wordfence are not having the issue on the same hosting server.

So then I’m thinking possibly then it is the resources being used by Wordfence possibly when trying to keep a website safe?

Could that be the case?

Could you shed some light on HOW things work when Wordfence protects a site, and if it can use quite a bit of hosting resources to do its job to protect the client site ?

Some more clarification on HOW I can resolve this would be great. Thanks in advance!

Please advise that would be great.

Thanks