strapi/packages/strapi-plugin-users-permissions/config/request.json

{
  "ratelimit": {
    "interval": 60000,
    "max": 10
  }
}