So, Freelay has kind of been my ongoing experiment with spam filtering. They were getting past my fast reply filter, so I made it a little bit more robust. Once I've had some coffee I was actually going to post about what I noticed the bot was doing in my logs. Basically, it was spoofing its timestamp and then if it got rejected once it would resubit the same event a bunch of times in like 300 millisecond intervals.