[justsomehnguy]

> 128KB of one bad message per six hours, for instance. There should be no need to make a month-long or permanent ban

As someone who saw the actual bruteforce attempts, most bots abandon any attempts after an hour or two. Resources are cheap but even for spammers (almost unlimited resources) futile attempts are costly.