Who's prosecuting the botnet spamming my site with 1000/second expensive requests eh?