Help me, please. My server is attacked DDoS

[ndduy]

can you write a script, please ? it use to ati DDoS but i'm a newbie i can't do it.
I have a log file www.mediafire.com/?yz2njlm0kzj . I want to read a DDos's IP address from log file, after that i want to add that IP to Firewall . I can do it by handicraft but i need a script, it can autorun every 5 min on my server.

Thank .

[kaushalpatel1982]

You have not mentioned the nature of the server. Means what is it used for?

Log is showing SIP communication which is normally using for VoIP. While talking about VoIP, it generate good amount of traffic and consume bandwidth.

If you feel this is DoS attack from single IP Address then the Rule you provided should work. I personally suggest do not open unnecessary ports which is not used.