diff --git a/config/discourse_defaults.conf b/config/discourse_defaults.conf
index 2b0bd3149b3..17146b1cac5 100644
--- a/config/discourse_defaults.conf
+++ b/config/discourse_defaults.conf
@@ -212,7 +212,7 @@ max_reqs_per_ip_per_10_seconds = 50
 max_asset_reqs_per_ip_per_10_seconds = 200
 
 # global rate limiter will simply warn if the limit is exceeded, can be warn+block, warn, block or none
-max_reqs_per_ip_mode = none
+max_reqs_per_ip_mode = block
 
 # bypass rate limiting any IP resolved as a private IP
 max_reqs_rate_limit_on_private = false