[bilekas]

You would think there would be some account-based flag for that.. Even something insane like 10 reset requests within 2 hours.

This should be standard stuff really!