I just want to mention, Cloudflare is ineffective if the hackers know the IPs of hashnest's name servers. They need to get completely new hosting and then immediately get cloudflare right after that.
That is not correct. After setting up Cloudflare you simply set the existing servers to automatically reject every connection attempt except those going through cloudflare...