# Rate Limit - Only 100 tries per IP address every 3600 seconds

**URL:** <https://forum.ghost.org/t/rate-limit-only-100-tries-per-ip-address-every-3600-seconds/8529>\
**Category:** Developer help\
**Created:** [August 5, 2019, 2:48am UTC](https://forum.ghost.org/t/rate-limit-only-100-tries-per-ip-address-every-3600-seconds/8529 "2019-08-05T02:48:37Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![www](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/www/32/4040_2.png) [@www](https://forum.ghost.org/u/www)\
**Post date:** [August 5, 2019, 2:48am UTC](https://forum.ghost.org/t/rate-limit-only-100-tries-per-ip-address-every-3600-seconds/8529/1 "2019-08-05T02:48:37Z")

</div>

I’m getting a rate limit error “Only 100 tries per IP address every 3600 seconds”.

Can it be overridden in the config.production.json file or am I going to have to hack the core files?

I need this limit to go away.

---

<div class="post-metadata">

**Author:** ![egg](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/egg/32/1691_2.png) [@egg](https://forum.ghost.org/u/egg)\
**Post date:** [August 5, 2019, 5:06am UTC](https://forum.ghost.org/t/rate-limit-only-100-tries-per-ip-address-every-3600-seconds/8529/2 "2019-08-05T05:06:53Z")

</div>

You can override it in the config 🎉

Here’s the default settings: [https://github.com/TryGhost/Ghost/blob/master/core/server/config/defaults.json#L39-L75](https://github.com/TryGhost/Ghost/blob/master/core/server/config/defaults.json#L39-L75)

---

<div class="post-metadata">

**Author:** ![www](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/www/32/4040_2.png) [@www](https://forum.ghost.org/u/www)\
**Post date:** [August 5, 2019, 1:23pm UTC](https://forum.ghost.org/t/rate-limit-only-100-tries-per-ip-address-every-3600-seconds/8529/3 "2019-08-05T13:23:29Z")

</div>

Perfect, thank you Fabien!

---

<div class="post-metadata">

**Author:** ![rlippmann](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/rlippmann/32/7804_2.png) [@rlippmann](https://forum.ghost.org/u/rlippmann)\
**Post date:** [January 18, 2021, 3:02pm UTC](https://forum.ghost.org/t/rate-limit-only-100-tries-per-ip-address-every-3600-seconds/8529/4 "2021-01-18T15:02:45Z")

</div>

I could not find out the variables in config.production.json, but this helped me to overcome the limit:

mysql myghostdb  
delete from brute;