Thanks. I'll add the plugin now.
Since I had filtered almost all IP's, there are no crashes for the last 30 minuties. I removed the iptables rules and will wait for a new attack.