We are not self-hosting. Our team is using
https://app.typebot.io/, and we conducted the following test: Within less than 24 hours, a user using the same real IP made over 1000 requests to Typebot. All of them were charged. Because of this, we would like to know what Typebot can do to prevent malicious spam?