ingress rate limiting

How do I stop my HPA from scaling up just to serve bot traffic?

My small Kubernetes cluster is scaling up to handle a flood of requests for nonexistent endpoints. Most requests seem to come from different IPs, so ingress rate limiting…