I am experiencing the same issue. My website is under bot attacks for 10 days.
I have tried wordfence to other plugins..failed.
I use my dedicated server firewall..still useless.
Abnormal traffic,some sql injection i get from logs.
I try to block from htaccess etc..all failed. I got attacks from various IP’s including many hits from google referrers. What i try finally cloudflare pro. and change to “under attack” mode it prevents and make my website up. But this is not the true solution.
https://tinypic.com/view.php?pic=ve83zo&s=8# (cloudflare stats)
Attack is to domain name only, when i copy site content to another domain, no problem.
