Agreed server should have a rate-limiting on each account to prevent DDoSing in future.