Yeah, Cloudflare is a good idea, that should probably help block them before even getting to the site.