A have a http flood on my server, not so much queries, but anyway. Queries in log
95.55.237.3 - - [06/Sep/2012:14:38:23 +0400] \"GET / HTTP/1.0\" 200
You can also block specific IP, as additional measure.
http{ deny 127.45.4.1; ... }
Or put blocked IPs in separate file
http{ include blockedips.conf ... }
deny 1.12.4.5;