Rate limit misconfigured bots
You can certainly do this in nginx with the limit_req_zone module.
In nginx.conf setup a zone:
limit_req_zone $binary_remote_addr zone=one:1000m rate=100r/m;
You can also use X_Forwarded_For instead of binary_remote_addr too.
In your site config location block just reference the zone:
limit_req zone=one burst=10 nodelay;
doc: http://nginx.org/en/docs/http/ngx_http_limit_req_module.html