I have WHM/Cpanel and nginx installed. Lately i had cpu load issues , so i traced the problem in apache load. The attacker is using "fake ips" and flooding apache get requests, (same one).

Please check the image to understand what i mean.

how can i limit equal request? or reject it?