[Answered ]-Django throttle rate limit for specific unauthenticated user based ip address

Is there any proxy in front of the application instance? If yes, you might want to setup NUM_PROXIES setting of django rest framework.

If you need to strictly identify unique client IP addresses, you’ll need to first configure the number of application proxies that the API runs behind by setting the NUM_PROXIES setting. This setting should be an integer of zero or more. If set to non-zero then the client IP will be identified as being the last IP address in the X-Forwarded-For header, once any application proxy IP addresses have first been excluded. If set to zero, then the REMOTE_ADDR value will always be used as the identifying IP address.

• https://www.django-rest-framework.org/api-guide/throttling/#how-clients-are-identified
• https://oxpedia.org/wiki/index.php?title=AppSuite:Grizzly#Multiple_Proxies_in_front_of_the_cluster