Application name and version: Wordpress 4.7.3
Runing on bitnami for wordpress from aws marketplace
Operative system/Platform: ubuntu 64
Was it installed as the root user? yes
Is there anything you've done and/or tried with the application before posting here?
Tried multiple plugins to block ips (askimet, wordfence, ceber), changed wp-admin/login paths to a custom path, blocked access to pingbacks, updated plugins and themes.
My WP is being spammed and bruteforced, I've tried blocking several ips and changing login paths but it still goes on.
Even with the blocks there's too many calls to the site and after about 15 minutes it is down, i can access it via SSH and when i set the security group to allow HTTP access to my ip only in about 5~10 minutes it is running again super fast.
What should i do to increase security and have my site up and running again?
inb4 -- sorry for bad english.