Rate Limiting

A defense mechanism that limits the number of requests a user or IP address can send within a given time window. Rate limiting protects against brute force, credential stuffing, and API abuse. Its absence is one of the most common flaws in SMB APIs, often exploited for account enumeration.