Chinese IPs invloved in DDOS and blocking them

Our server had a ddos because of the stupid Chinese DDOS

To recover from it
- edit /etc/csf/csf.conf and go to the line CC_DENY and add CN as a value (country code for china)
- restart csf

We also blocked certain ip which we were able to identify

123.150.182.0/24

[220.181.51.36
220.181.51.37
220.181.51.39
220.181.51.54
220.181.51.55
220.181.51.61
220.181.51.62]

220.181.51.0/24

To block the complete range use

/etc/csf/csf.pl -d 220.181.51.0/24