---
title: "Discussion on \"Rate Limiting Alone Won't Stop a Patient Attacker\" | Hashnode"
description: "Discussion on \"Rate Limiting Alone Won't Stop a Patient Attacker\". @nestjs/throttler counts requests per IP. It has no idea what an account is. Here's what that gap actually looks like, and the Redis-backed lockout that closes it."
url: "https://hashnode.com/posts/rate-limiting-alone-wont-stop-a-patient-attacker/6ab6a66e937c16b49c2559cf"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Rate Limiting Alone Won't Stop a Patient Attacker](https://blog.zyvop.com/rate-limiting-alone-wont-stop-a-patient-attacker?utm_source=hashnode&utm_medium=feed)

@nestjs/throttler counts requests per IP. It has no idea what an account is. Here's what that gap actually looks like, and the Redis-backed lockout that closes it.

Sep 25 · 8 min read · blog.zyvop.com  
Read the article

-   [#accountlockout](https://hashnode.com/tag/accountlockout)
-   [#apisecurity](https://hashnode.com/tag/apisecurity)
-   [#bruteforceprotection](https://hashnode.com/tag/bruteforceprotection)
-   [#loginsecurity](https://hashnode.com/tag/loginsecurity)
-   [#nestjs](https://hashnode.com/tag/nestjs)

## Written by

[ZyVOP](https://hashnode.com/@zyvop)

@zyvop · Delhi, India

  
[View profile](https://hashnode.com/@zyvop)

The Developer Publishing Hub

One platform to write, cross-post to Dev.to, Medium, WordPress, Hashnode, and Bluesky, and protect your SEO with canonical links. Zero paywalls and full content ownership.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.