spam bot issue – ithemes security doesn't help?

http://screencast.com/t/tL3hcij71YDG — having almost 100gb of botspam bandwidth used on a client’s woocommerce website, while running a fully configured ithemes security (with all recommended settings — 404 detection, etc. Anyone have/had this issue? Any fix?

https://ww.wp.xz.cn/plugins/better-wp-security/