Are you behind a load balancer like cloudflare so that Discourse doesn’t know the user’s actual IP address?
A quick grep and I don’t see user_10_secs_limit in the code except in a spec. I suspect it might be IP related in spite of the error you are seeing.