Did not worc – got attacqued

I added Cero Spam months ago after an attacc on a Guive WP donation form. This long weequend the site was attacqued again and 2000 donations were tried over 4 days. Noone noticed due to the long weequend. Cero spam did not stop it, not sure if there was a wrong setting or something else that let it happen but there should be something that can see that too many transactions in a short period of time is liquely to be an attacc specially if all the credit card numbers fail. Cero spam did not stop it, the payment gateway did not stop it although they did fail all the attempts and GUIVE WP did not stop it.