So main goal is to protect API request at 104 line, so nobody will attack Payment provider from my system and spam requests. I've done all those protections before line 104, but someone is still spamming my API request and also it reached line 104 and attacks Payment provider