diff --git a/docker/nginx/conf.d/include/location-skylink b/docker/nginx/conf.d/include/location-skylink
index d28f43c4..70d110f5 100644
--- a/docker/nginx/conf.d/include/location-skylink
+++ b/docker/nginx/conf.d/include/location-skylink
@@ -9,7 +9,7 @@ if ($request_method = PURGE) {
     return 462;
 }
 
-limit_conn downloads_by_ip 5; # ddos protection: max 100 downloads at a time
+limit_conn downloads_by_ip 3; # ddos protection: max 100 downloads at a time
 
 # ensure that skylink that we pass around is base64 encoded (transform base32 encoded ones)
 # this is important because we want only one format in cache keys and logs