[Help] Detect IP and block DDOS

Hi,

My site is under ddos attack, as far as i know it's small ddos attack with arround 50-100 IP (botnet)

I try to block IP with csf but it's hard to block IP one by one manually. Is there any script that auto find out IP with many connections then add it to csf.deny list?

Many thanks for your help!

http://ift.tt/1dvHQ0Z